June 25, 2026: River Financial Corporation—the Alabama holding company behind River Bank & Trust—filed a Form 8-K Item 1.05 cybersecurity disclosure that reads like a live incident, not a closed case. Attackers were in the network around June 16. Ransomware was on servers by the time the bank found it around June 19. Whether customer PII left the building is still a forensic question.
What the SEC filing says
River reported that an unauthorized threat actor accessed its network environment, including River Bank & Trust systems. After discovery the bank disabled affected administrative accounts and took impacted systems offline. A third-party forensics firm is investigating whether personally identifiable information was accessed or exfiltrated.
As of the June 25 filing River had not determined the full scope and said certain operations were still impacted while external specialists worked on restoration. The company committed to amend the 8-K within four business days once it had material victim-scope information—standard choreography for public companies under the SEC's cybersecurity disclosure rules.
Why bank ransomware filings matter before counts arrive
Community banks hold the boring crown jewels: names, addresses, tax IDs, account numbers, loan files, and wire instructions. Even a "we do not know yet" 8-K tells customers and regulators that assume breach posture is appropriate—watch accounts, ignore out-of-band wire-change requests, and wait for a formal notification letter rather than trusting random "River Bank security" texts.
River Financial is headquartered at 2611 Legends Drive, Prattville, Alabama. The filing does not name a ransomware group or initial access vector.
What to do if you bank with River Bank & Trust
- Watch for an official breach notice by mail or secure message—not email links alone.
- Enable transaction alerts on checking and savings accounts.
- Call the bank on a published number if anyone asks you to move money or share OTP codes.
- Freeze credit if a future notice confirms SSN exposure.
Canonical record
River Financial 2026 on BreachHistory.
Source: SEC Form 8-K (June 25, 2026).