River Financial Corporation says stolen data from June ransomware attack was deleted by hackers

River Financial Corporation said it received representations from the threat actor behind a June ransomware attack confirming the deletion of stolen data. The confirmation comes as the company's broader investigation into the breach's scope and impact continues. The intrusion began around June 16 when an unauthorized party gained access to River's network environment. The company identified the activity on June 19 and determined that ransomware had been deployed across portions of its server environment. River responded by disabling compromised administrative accounts and taking affected systems offline. River is working with a third-party forensic firm to determine the nature and scope of the incident, including whether personally identifiable information was accessed or removed. A July 30 filing shows the company has still not determined whether any personal information was among the data taken. The company said it took steps to suppress the exposed data, including securing representations from the threat actor that the stolen material had been deleted from its possession. River has not identified the threat actor or disclosed how the group gained access. The company said it has not yet determined whether the incident is reasonably likely to have a material effect on its business or financial condition.