In June 2026, River Financial Corporation experienced a ransomware attack that involved deployment of ransomware across portions of its server environment and unauthorized data exfiltration. The company responded by taking affected systems offline and disabling compromised administrative accounts. Following engagement with the attackers, River received representations that the stolen data was deleted. The investigation, assisted by a third-party forensic firm, is ongoing to determine the full scope and impact, including whether any personal data was compromised. The company has disclosed the incident in SEC filings and faces multiple lawsuits. Details on the attack vector or threat actor remain undisclosed.

The ransomware attack resulted in unauthorized access to parts of River Financial's network and exfiltration of data. The attackers deleted the stolen data after engagement, likely following a ransom payment. The company has not confirmed whether personally identifiable information was compromised or if the incident will materially impact its business or financial condition. Multiple lawsuits indicate potential legal and reputational consequences. Operational impact included taking systems offline and disabling administrative accounts to contain the incident.

The company has taken affected systems offline and disabled compromised administrative accounts to contain the attack. Engagement with the threat actors led to deletion of the stolen data. The investigation is ongoing with third-party forensic assistance. No official patch or fix applies as this is an incident response to a ransomware attack rather than a software vulnerability. Organizations should monitor vendor advisories for updates. No further specific mitigation guidance is provided by the company at this time.