River Bank & Trust Data Breach

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating a ransomware incident involving River Financial Corporation, the Alabama bank holding company that operates River Bank & Trust.

River Financial Corporation disclosed the cybersecurity incident in a Form 8-K filed with the Securities and Exchange Commission on June 25, 2026. According to the filing, an unauthorized threat actor gained access to the company’s network environment on or about June 16, 2026. River identified the suspicious activity on or about June 19, 2026, and determined that ransomware had been deployed across portions of its server environment.

River Bank & Trust is a full-service commercial bank based in Prattville, Alabama. According to the bank’s investor relations page, River Financial Corporation is the bank holding company for River Bank & Trust, which has grown to more than $3.8 billion in assets and 25 offices.

‍

What Happened In This Data Breach?

According to River Financial Corporation’s SEC filing, the company discovered unauthorized activity within its network environment on or about June 19, 2026. The company later determined that an unauthorized actor had gained access to the network several days earlier, on or about June 16, 2026.

The incident involved ransomware deployed across portions of River’s server environment. After discovering the attack, River stated that it took containment measures, including disabling affected administrative accounts and taking impacted systems offline.

River also reported that certain operations were impacted by the incident. The company is working with outside cybersecurity professionals and a third-party forensic firm to investigate the nature and scope of the attack and restore affected operations.

‍

Was Personal Information Exposed?

At this time, River Financial Corporation has not publicly confirmed whether personally identifiable information was accessed, stolen, or exposed.

In its SEC filing, River stated that its investigation is ongoing and includes a review of whether any personally identifiable information was subject to unauthorized access or exfiltration. The company also stated that the full nature, scope, and impact of the incident had not yet been determined.

Because the investigation is still ongoing, customers, employees, and others connected to River Bank & Trust should pay close attention to any future notices or updates from the company.

‍

Why This Incident Matters

Ransomware incidents involving financial institutions are especially concerning because banks often maintain sensitive personal and financial information about customers, employees, account holders, borrowers, and business clients.

Depending on what systems were accessed, information potentially at risk could include names, contact information, account information, loan information, Social Security numbers, tax identification numbers, employment information, and other sensitive records.

River has not confirmed that any of this information was accessed or stolen. However, if personal or financial information was compromised, affected individuals may face an increased risk of identity theft, fraud, phishing attempts, and unauthorized account activity.

‍

What Should River Bank & Trust Customers Do?

Customers and others who may have been affected should remain cautious while the investigation continues.

Individuals may want to monitor bank accounts, credit card statements, credit reports, loan records, and other financial accounts for suspicious activity. It may also be wise to watch for unusual emails, text messages, or phone calls claiming to be from River Bank & Trust or another financial institution.

If River Bank & Trust sends a data breach notification letter, affected individuals should keep a copy of the letter and save any records showing time spent, money lost, or steps taken in response to the incident.

‍

Contact Our Data Breach Attorneys

Companies and financial institutions that collect sensitive personal information have a responsibility to protect it. When a cybersecurity incident exposes private information, affected individuals may have legal rights.

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating the River Bank & Trust ransomware incident and evaluating potential claims on behalf of individuals whose information may have been compromised.

If you are a River Bank & Trust customer, employee, or account holder and receive a notice that your personal information was involved in this incident, call (205) 322-8880 for a free consultation.

There are no upfront costs, and you pay nothing unless we recover compensation on your behalf.

‍