2026 U.S. Bank — LockBit leak-site claim; Sep 4 deadline, no sample (unverified)
Data compromised
Unknown — LockBit post cited by Cybernews/The Register did not include a data sample; employee vs customer scope not established
Technical writeup
Unverified ransomware leak-site claim — August 2026 (Cybernews; The Register). LockBit listed U.S. Bank on its leak site with a countdown to approximately September 4, 2026 and did not publish a data sample, leaving data types and scale unknown. Trade press reported the bank was aware and investigating. U.S. Bank had not issued a customer notice confirming a LockBit data theft at indexing. recordsAffected 0 — no actor or company count available.
Root cause
Unverified LockBit leak-site listing claiming U.S. Bank compromise with September 4, 2026 leak deadline; no data sample published; bank reportedly investigating