Data breach: Citizens flags limited customer impact after vendor data incident amid ransomware claims

Data breach: Citizens flags limited customer impact after vendor data incident amid ransomware claims
Bank says operations unaffected as hackers claim millions of records in alleged breach
APR 21, 2026

Citizens Financial Group said it is dealing with a data security incident tied to a third-party provider, even as a ransomware gang claims to have accessed millions of records linked to the bank.

In a statement released April 21, the bank said, “We have been managing an incident involving data extracted from a third party vendor.” It added that “most of this was masked test data, although a limited set of information for a small number of customers was involved.”

The company emphasized there is no indication its own systems were compromised, noting “there is no evidence of unauthorized access to the Citizens network, and our operations continue as normal.”

The disclosure comes as cybersecurity researchers report that the Everest ransomware group has listed Citizens among its latest alleged victims, claiming to hold a large dataset potentially affecting millions of individuals.

According to a report cited by Cybernews, the threat actors have posted sample data and issued a deadline before any broader release, a tactic commonly used to pressure organizations into negotiations.

The same report suggests the purported Citizens dataset may include personal details such as names, addresses and account-related information, though the scale and sensitivity of the data remain unverified.

Citizens said it has increased monitoring and is contacting affected individuals, adding that safeguarding client information remains a priority.

The situation remains fluid, with the bank’s statement indicating limited exposure while external claims point to a potentially broader incident.

Latest News

Supreme Court strengthens SEC power to claw back fraud profits from violators
Supreme Court strengthens SEC power to claw back fraud profits from violators

No investor losses? The SEC can still claw back every dollar of pro

Wirehouse moves: RBC nabs experienced Wells Fargo advisor in New England
Wirehouse moves: RBC nabs experienced Wells Fargo advisor in New England

Plus, Well Fargo hails May recruitment haul totaling more than $3 billion in assets, while UBS recruits a top advisor and women's champion from Lazard.

Robinhood Concierge for millionaire investors nears 60,000 clients
Robinhood Concierge for millionaire investors nears 60,000 clients

Robinhood’s invite-only Concierge unit now serves about 60,000 affluent customers with CFP access, tax planning, and estate planning resources as the retail brokerage expands further into wealth management.

Advisor360, Willow Wealth tap seasoned veterans for C-suite roles
Advisor360, Willow Wealth tap seasoned veterans for C-suite roles

The two wealthtech platforms name new C-level executives as AI-native strategy and private markets growth accelerate across the advice industry

Western Asset agrees to $100M SEC penalty over cherry-picking scheme
Western Asset agrees to $100M SEC penalty over cherry-picking scheme

Franklin Resources' fixed-income unit settles SEC charges and closes firm-level DOJ and regulatory probes, but Kenneth Leech's criminal case continues.

SPONSORED Estate planning isn't a service add-on. It's your retention strategy.

As $84 trillion prepares to change hands, advisors who treat estate planning as peripheral are quietly building a sieve, not a book.

SPONSORED Why strategy matters more than performance

In volatile markets, the advisors who win aren't the ones with the best calls - they're the ones whose clients stay the course.