enforcement

9 articles

RVRF·July 30, 2026·enforcement

River Financial Provides Update on Ransomware Investigation, Says Threat Actor Claimed to Delete Stolen Data

River Financial Corporation disclosed that its investigation into the June ransomware incident is ongoing, and the company obtained representations from the threat actor that it deleted the exfiltrated data, though the full scope and impact remain undetermined.

ADI·July 29, 2026·enforcement

Analog Devices Discloses Cybersecurity Incident and Unrelated Data Leak Report

Analog Devices reported unauthorized access to its systems in June 2026 that resulted in data exfiltration, and separately disclosed it is assessing a public report of a different cybersecurity matter from late July.

FIVE·July 22, 2026·enforcement

Five Below Discloses Cybersecurity Incident Involving Employee Computer, Says No Customer Data Affected

Five Below reported that a threat actor gained unauthorized access to a single employee's computer through social engineering and exfiltrated files, but the company contained the incident and believes no personally identifiable information was compromised.

UPBD·July 22, 2026·enforcement

Upbound Group Discloses Cybersecurity Incidents That Contributed to $13 Million in Fraudulent Contract Losses

Upbound Group reported unauthorized access to certain customer information that was used to facilitate fraudulent lease-to-own agreements, resulting in approximately $13 million in elevated losses in its Acima segment during the second quarter of 2026.

CLOV·July 17, 2026·enforcement

Clover Health Discloses Cybersecurity Incident Involving Employee Account Breach

Clover Health reported that a threat actor gained access to three employee accounts through social engineering, potentially exposing member personal and health information.

EYPT·July 17, 2026·litigation

EyePoint Agrees to Pay $4.7 Million to Settle Kickback Allegations Over Eye Drug DEXYCU

EyePoint will pay $4.7 million to resolve federal and state allegations that it paid kickbacks to ambulatory surgery centers to induce purchases of its post-cataract surgery drug DEXYCU, and has entered a five-year corporate integrity agreement with the HHS Office of Inspector General.

RVRF·July 17, 2026·litigation

River Financial Discloses Two More Class Actions Over Ransomware Incident, Total Now Four

River Financial Corporation reported that two additional class action lawsuits have been filed against the company in connection with the June ransomware attack, bringing the total to four.

RVRF·July 10, 2026·enforcement

River Financial Updates Ransomware Investigation: Data Removed, Class Actions Filed

River Financial disclosed that a threat actor removed data from its network during the June ransomware incident, and two class action lawsuits have been filed against the company.

SRBK·July 10, 2026·enforcement

SR Bancorp Discloses Vendor Data Breach Exposing Certain Customer Records

SR Bancorp reported that an unauthorized actor accessed files on the computer servers of its internal audit provider, Mercadien, P.C., exposing personal information belonging to certain Somerset Regal Bank customers. The company stated its own systems were not impacted and it does not expect a material financial hit from the incident.

DisclaimerPrivacyTermsContact

© 2026 Record Alpha. All rights reserved.