River Financial Corporation, the parent company of River Bank & Trust, is currently navigating the aftermath of a significant ransomware incident that compromised portions of its network environment. The breach, which was first identified in June 2026, prompted the institution to immediately deploy defensive measures, including the forced offline status of affected systems and the disabling of compromised administrative accounts to contain the threat.

According to Security Affairs, the financial organization has received verbal assurances from the unidentified threat actors confirming that the exfiltrated data has been deleted. Despite this claim, the bank is maintaining a cautious stance. The company continues to work alongside a third-party forensic firm to conduct a comprehensive audit of its systems. This investigation aims to determine the full scope of the breach and clarify whether sensitive personally identifiable information was accessed or successfully extracted by the attackers during the intrusion.

To date, the bank has not disclosed the specific identity of the hackers or the technical methods utilized to circumvent their network security. The organization remains in a state of assessment regarding the incident’s ultimate financial and business impact. River Financial Corporation has pledged to provide further updates through SEC filings as more definitive information becomes available, noting that a full report will follow once the forensic evaluation concludes. The incident underscores the persistent threat ransomware poses to the financial sector and highlights the ongoing challenges banks face in verifying claims made by cybercriminals following a network compromise.