Evolve Bank & Trust evolvebank.com Evolve Bank & Trust data breach: what happened and what to do
Evolve Bank & Trust said a ransomware attack that began in February 2024 exposed names, Social Security numbers, bank account numbers and contact details of about 7.6 million people, including customers of its fintech partners.
View all 13,115 breaches- Breach date
- 9 Feb 2024
- Made public
- 8 Jul 2024
- Affected
- 7,640,112
- Data exposed
- Names, Social security numbers, Bank account numbers, Contact information
- Last updated
Evolve Bank & Trust told regulators in July 2024 that attackers had copied customer data from its systems. A filing with the Maine Attorney General listed 7,640,112 people affected in total, and the bank said it expected that number to rise as its investigation continued.
What happened
According to the bank's investigation, an employee clicked a malicious link, which gave a member of the LockBit ransomware group access to Evolve's database and file shares. The breach is dated February 9, 2024 in the state attorney general notifications. Evolve turned down the ransom demand, and the group then published the stolen files on the dark web. The bank said it found no evidence that the attackers reached customer funds.
LockBit first claimed it had breached the US Federal Reserve. The files turned out to belong to Evolve.
Who was affected
Evolve's own customers, and also people who never banked with Evolve directly. The bank works with fintech companies through what it calls Open Banking partnerships, and the exposed data included customers of those partners. Affirm, Wise and Bilt each confirmed that their customers were affected.
What was exposed
The bank listed names, Social Security numbers, bank account numbers and contact information for most of its personal banking customers and its Open Banking partners' customers.
That combination is what makes this one serious. A Social Security number with a name and address is enough to apply for credit in your name. A bank account number can be used in attempts at fraudulent debits. Contact details give scammers a way to reach you with messages that mention the breach.
The bank's response
Evolve offered affected people 24 months of free credit monitoring and identity theft protection through TransUnion.
What to do if you were in it
- 1
Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion so nobody can open new credit in your name. Then check your reports at annualcreditreport.com. The FTC explains how freezes work.
- 2
Take the free credit monitoring if it's offered
Evolve offered 24 months through TransUnion. Use the enrollment details in your notice letter. It alerts you to new credit activity but doesn't stop it, so pair it with a freeze.
- 3
Watch your bank account
Check statements for debits you didn't authorize. If you think your account number is being misused, ask your bank whether to close the account and open a new one.
- 4
Expect scams that mention the breach
Emails, texts and calls that quote real details about you, or offer help with the breach, are a common follow-up. Don't click links in them. Go to the company's own site or phone number instead.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web for your details and alerts you when they show up in a new leak.
Frequently asked
Was I affected by the Evolve Bank & Trust breach?
If you banked with Evolve, or used a fintech app that partners with it, you may have been. Evolve says it notified affected people by letter. Affirm, Wise and Bilt confirmed that their customers were among them.
What was exposed in the Evolve breach?
Names, Social Security numbers, bank account numbers and contact information, according to Evolve.
Did the attackers take money from accounts?
Evolve said it found no evidence that the attackers accessed customer funds.
Do I need to freeze my credit?
A leaked Social Security number is the main reason to. A freeze is free, and you place it separately at Equifax, Experian and TransUnion.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
