Co-op City

Summary

Riverbay Corporation identified unusual activity in its IT network, isolated the systems, and launched an investigation with a third‑party cybersecurity firm and law enforcement, determining that an unauthorized party accessed the network and acquired files that may contain names, Social Security numbers, and bank account details of shareholders, applicants, current and former employees, and possibly residents whose information was shared by shareholders. The organization notified potentially affected individuals, provided complimentary credit monitoring, and established a toll‑free incident response line for inquiries.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On May 21, 2025, Riverbay Corporation identified unusual activity in its information technology network. Upon detection, the company immediately isolated and secured its systems. Riverbay then launched an investigation with the assistance of a third‑party cybersecurity firm and notified law enforcement. The initial response aimed to contain the activity and preserve evidence for further analysis.

Through the investigation, Riverbay determined that an unauthorized party gained access to its IT network and systems between April 21, 2025 and May 21, 2025. On June 2, 2025, the company concluded that the unauthorized party accessed and/or acquired files from certain computer systems. The investigation could not rule out the possibility that files containing names, Social Security numbers, and bank account and routing numbers pertaining to Co‑op City shareholders and applicants, as well as current and former Riverbay employees, were accessed. Additionally, the incident may have involved information of Co‑op City residents if their data had been provided to Riverbay by the shareholder they reside with.

On June 20, 2025, Riverbay began notifying individuals whose information may have been involved in the incident. As part of the response, the company offered complimentary credit monitoring memberships to potentially affected individuals. Riverbay established a dedicated toll‑free incident response line at 1‑866‑461‑1672, available Monday through Friday from 9:00 a.m. to 6:30 p.m. Eastern Time, excluding major U.S. holidays. To address future risks, Riverbay implemented additional security measures to enhance the security of its network and provided additional data‑security training for employees.

Sources

Sources available to members: 1 source.