US Bank investigates LockBit ransomware extortion claims

US Bank is investigating claims made by the LockBit ransomware group, which alleges that the bank was breached and sensitive data was stolen. LockBit added the bank to its data-leak site on August 19, setting a deadline of September 3 to meet an undisclosed extortion demand or face the publication of the purportedly stolen files.

Lee Henderson, US Bank’s Vice President of Public Affairs, confirmed the bank is aware of the claims but stated, “At this time, there is no indication that our internal systems have been impacted, and there is no evidence of unauthorized access to our network.” The bank has not disclosed whether it has communicated with the group or received specific details regarding the nature or volume of the alleged stolen data.

The incident follows a pattern of double-extortion tactics where threat actors threaten to release information to pressure victims into paying. Law enforcement investigations into LockBit have previously noted that the group has retained victim data even after ransom payments were made.