Company Profile
River Financial Corporation is a bank holding company based in Prattville, Alabama, and the parent of River Bank & Trust. It operates as a community-focused financial institution providing traditional banking services. The company trades on the OTC market under the ticker RVRF, with a market capitalization of roughly $360 million as of mid-2026. We have covered the company in four articles, all focused on a cybersecurity incident and its legal aftermath.
History
River Financial first disclosed a cybersecurity incident on June 19, 2026, reporting that ransomware had been deployed across parts of its server infrastructure. The company promptly took affected systems offline and engaged a third-party forensic firm to lead an investigation. At that stage, the disclosure was primarily operational, focused on containing the breach and restoring services.
The story evolved significantly in early July. On July 10, the company filed an amended disclosure confirming that an unauthorized threat actor had not only accessed its network but had also removed certain data from its environment. The filing revealed that two class action lawsuits had already been filed against the company in connection with the breach. River Financial stated it was still working to determine the nature and scope of the information involved, including whether any personally identifiable information was accessed or exfiltrated, and noted it was not yet aware of any fraud directly tied to the incident.
A week later, on July 17, the company disclosed that the number of class action lawsuits had doubled to four. A third suit was filed on the same day as the previous update, and a fourth followed on July 16. All four complaints centered on whether the threat actor obtained customers’ personally identifiable information. The company reiterated that the investigation had not yet determined the full scope of the breach or whether it was likely to have a material impact on its business or financial condition.
The most recent update came on July 30, when River Financial disclosed that it had taken steps to suppress the affected data. The company obtained representations from the threat actor that it had deleted the data in its possession. While such representations are a common feature of ransomware negotiations, they offer no guarantee that the data was not copied or retained elsewhere, and the company did not comment on the reliability of those assurances. As of that filing, the full nature, scope, and impact of the incident remained undetermined, and the company indicated it would file another amendment once more information became available. The series of disclosures traces a path from an operational disruption to a legal liability question, with the ultimate financial and reputational consequences still unresolved.