Citizens Bank Faces Class Action Lawsuits Following Third-Party Data Breach and Everest Ransomware Claims
Learn More
Citizens Bank, a financial institution based in Providence, Rhode Island, reports a data breach on April 21, 2026, caused from a security incident at a third-party vendor. The Everest group claimed responsibility for the attack and published samples of stolen data on their dark web leak site, demanding a payment and threatening to release the full dataset.
Threat actors gained access to an unnamed third-party vendor's systems and stole data belonging to Citizens Bank. The organization claims its internal network was not breached and the exposed information consisted of masked values except for a limited set of customers information. The company confirmed the following data was compromised:
- Full names
- Home addresses
- Bank account numbers
The Everest ransomware group claims to have stolen 3.4 million customer records containing:
- Full names
- Home addresses
- Account numbers
- Internal document flags
The bank states a few thousand customers are affected, and the hackers claims 3.4 million individuals. Citizens Bank is running enhanced account monitoring for impacted individuals and sent notifications via email and physical mail. Citizens Bank is providing complimentary account monitoring services and has warned customers to be careful of phishing attempts or unsolicited requests for banking credentials.
