U.S. Bank

Profile narrative

The organisation is known by the alias U.S. Bank. Its headquarters is located in the United States of America. The name indicates it operates as a banking institution within the United States. No additional details about its core products, services, or market scope are provided in the source material. The organization continues to operate under the U.S. Bank brand name.

On 19 August 2026, U.S. Bank reported that it was investigating a claim made by the LockBit ransomware group. LockBit asserted that it had breached the bank's network and stolen undisclosed data. The group threatened to release the material unless an extortion demand was satisfied. The bank stated that it found no indication of internal system impact and no evidence of unauthorized access. It also noted that it had not disclosed whether it engaged with the attackers, received a ransom demand, or identified the type or volume of allegedly taken data.

LockBit subsequently added U.S. Bank to its data‑leak site, opening a window for the demanded payment. The listing on the leak site contained no file samples, counts, or specifics about affected systems or individuals. The incident illustrates the double‑extortion tactic where data is exfiltrated before encryption. It also highlights that paying a ransom does not guarantee the deletion of stolen information, as prior law‑enforcement actions have shown retained data after payment. No further information about the organisation's size, ownership structure, or other distinguishing attributes is available in the provided sources.

Incidents

1 incident linked to this organisation.