April 2026 reporting—including Bloomberg summaries of a pro-Iranian group taking credit—described distributed denial-of-service activity that disrupted Chime’s public-facing services around 1 April, with regional press echoing the company’s effort to reassure users about funds and data. Within days, plaintiffs’ firms filed putative class actions alleging cybersecurity negligence and data-breach-style harms, citing operator lockouts and downstream fraud anxieties—a pattern common when availability attacks coincide with criminal extortion marketing.
Canonical record: Chime April 2026 cyber incident on BreachHistory.
Sources: Bloomberg, The Star, ClassAction.org summary