Pivdennyi Bank

Pivdennyi Bank, also referred to as Southern Bank, is a financial institution headquartered in Ukraine. The organisation is identified in open sources as a major bank operating within the country’s banking sector. As a bank, it engages in core activities such as accepting deposits, extending credit, and providing other financial services to individuals, businesses, and possibly public sector clients. Its headquarters location places it within the Ukrainian financial system, which is subject to national banking regulations and oversight. The bank’s aliases reflect both its Ukrainian name and an English‑language translation used in international reporting. While specific details about its market share, customer base, or product portfolio are not disclosed in the available material, its classification as a major bank indicates a notable presence in Ukraine’s financial landscape.

The bank gained public attention due to its involvement in the widespread NotPetya ransomware attack that occurred on June 27 2017. This incident was part of a larger campaign that primarily targeted Ukrainian entities through a compromised update mechanism of popular tax accounting software. The malware, a modified variant of Petya, leveraged known Windows vulnerabilities to encrypt files irreversibly and propagate across infected networks. Forensic analysis indicated that the attack’s primary objective was data destruction rather than financial gain, affecting not only the bank but also government agencies, critical infrastructure, and other private sector organisations. Over 80% of the observed infections were located in Ukraine, leading security researchers and Western governments to attribute the operation to Russian military cyber units as part of ongoing hybrid warfare against the state. The attack underscored the vulnerability of Ukrainian financial institutions to sophisticated cyber threats and highlighted the broader geopolitical context in which such incidents occur.