Data breach: Citizens flags limited customer impact after vendor data incident amid ransomware claims

Data breach: Citizens flags limited customer impact after vendor data incident amid ransomware claims
Bank says operations unaffected as hackers claim millions of records in alleged breach
APR 21, 2026

Citizens Financial Group said it is dealing with a data security incident tied to a third-party provider, even as a ransomware gang claims to have accessed millions of records linked to the bank.

In a statement released April 21, the bank said, “We have been managing an incident involving data extracted from a third party vendor.” It added that “most of this was masked test data, although a limited set of information for a small number of customers was involved.”

The company emphasized there is no indication its own systems were compromised, noting “there is no evidence of unauthorized access to the Citizens network, and our operations continue as normal.”

The disclosure comes as cybersecurity researchers report that the Everest ransomware group has listed Citizens among its latest alleged victims, claiming to hold a large dataset potentially affecting millions of individuals.

According to a report cited by Cybernews, the threat actors have posted sample data and issued a deadline before any broader release, a tactic commonly used to pressure organizations into negotiations.

The same report suggests the purported Citizens dataset may include personal details such as names, addresses and account-related information, though the scale and sensitivity of the data remain unverified.

Citizens said it has increased monitoring and is contacting affected individuals, adding that safeguarding client information remains a priority.

The situation remains fluid, with the bank’s statement indicating limited exposure while external claims point to a potentially broader incident.

Latest News

Mesirow acquires part of flexPATH in second retirement deal of 2026
Mesirow acquires part of flexPATH in second retirement deal of 2026

Chicago-based Mesirow Fiduciary Solutions adds flexPATH's plan-level outsourced fiduciary book, boosting its retirement market reach to $164 billion.

Advisor moves: LPL lands $350M veteran advisor duo in Florida
Advisor moves: LPL lands $350M veteran advisor duo in Florida

Also, Raymond James's employee advisor channel adds breakaways from Wells Fargo and Stifel, while UBS welcomes an ex-Morgan Stanley duo in Indiana.

SEC accuses crypto firm founder of running $425 million Ponzi scheme
SEC accuses crypto firm founder of running $425 million Ponzi scheme

It promised guaranteed principal and 10% monthly returns. The SEC says it invested nothing.

MassMutual Ascend tops $2 billion in RIA annuity sales as advisors warm to income products
MassMutual Ascend tops $2 billion in RIA annuity sales as advisors warm to income products

Ten years after entering the fee-based annuity market, MassMutual Ascend says nearly half its lifetime sales came in the past two years alone – but barriers remain among fee-only advisors.

Fintech bytes: Wealth tech firms target advisor productivity with new integrations
Fintech bytes: Wealth tech firms target advisor productivity with new integrations

Amplify, WealthReach, Zeplyn and Zocks have unveiled partnerships aimed at automating portfolio management, content creation, account opening, and client communication.

SPONSORED Direct indexing webinar targets tax-loss harvesting amid market swings

Northern Trust’s Ken Lassner shows advisors how to convert volatility into after-tax portfolio gains

SPONSORED Who builds the income when the pension disappears?

Dan Biagini of American Equity says the steady decline of pensions, longer lifespans and a reset in interest rates are rewriting how advisors build retirement income