Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
The Finance Base
The Money Desk · Blog
Re:

Evolve Bank Data Leaked After LockBit’s “Federal Reserve Hack”: What Happened

LockBit’s 2024 “Federal Reserve hack” claim was misleading: the leaked files were identified as Evolve Bank data. Here’s what may have been exposed, whether money was stolen, and what affected consumers should do in 2026.
From TheFinanceBase Team6 min to read
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

LockBit claimed in June 2024 that it had hacked the U.S. Federal Reserve. The files later published were identified as data from Evolve Bank & Trust, a Federal Reserve member bank and banking-as-a-service provider—not demonstrated evidence of a breach of Federal Reserve systems.

Evolve said the incident was a LockBit ransomware attack that exposed files belonging to direct bank customers and people who used fintech services backed by Evolve. A breach notification reported approximately 7.6 million affected Americans, although the exact information exposed varied by person.

As an Amazon Associate I earn from qualifying purchases.

Evolve said it found no evidence that criminals accessed customer funds. The practical risks are identity theft, unauthorized account activity and phishing. The related class-action settlement is closed to new claims: approved payments were issued March 30, 2026, and uncashed checks are scheduled to become void September 28, 2026.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

LockBit’s Federal Reserve claim was misleading

LockBit publicly alleged that it had compromised the Federal Reserve. After data was released, Evolve said the attackers had “mistakenly attributed” the material to the Federal Reserve. Reporting and the released files pointed to Evolve Bank & Trust.

#1 Best Overall
Sandisk 2TB Extreme Portable SSD, Up to 1050MB/s, USB-C, USB 3.2 Gen 2, IP65 Water and Dust Resistance, Updated Firmware, External Solid State Drive, SDSSDE61-2T00-G25
  • Get NVMe solid state performance with up to 1050MB/s read and 1000MB/s write speeds in a portable, high-capacity drive(1) (Based on internal testing; performance may be lower depending on host device & other factors. 1MB=1,000,000 bytes.)
  • Up to 3-meter drop protection and IP65 water and dust resistance mean this tough drive can take a beating(3) (Previously rated for 2-meter drop protection and IP55 rating. Now qualified for the higher, stated specs.)
  • Use the handy carabiner loop to secure it to your belt loop or backpack for extra peace of mind.
  • Help keep private content private with the included password protection featuring 256‐bit AES hardware encryption.(3)
  • Easily manage files and automatically free up space with the SanDisk Memory Zone app.(5). Non-Operating Temperature -20°C to 85°C

The distinction matters. Evolve is a member of the Federal Reserve System, so its name and regulatory relationship could have helped create confusion. But the Federal Reserve’s June 14, 2024 enforcement action against Evolve addressed anti-money-laundering, risk-management and consumer-compliance deficiencies. It was not confirmation that Federal Reserve systems had been breached.

The most accurate description is therefore: LockBit claimed a Federal Reserve hack, but the available evidence and Evolve’s explanation indicate that the leaked data came from Evolve, not from demonstrated Federal Reserve systems.

Evolve’s incident FAQ and contemporaneous reporting provide the bank’s account of the attribution.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sandisk 1TB Portable SSD, Up to 800MB/s Read Speeds, Black (Old Model)
  • Solid state performance with up to 800MB/s read speeds in a portable drive. (Based on internal testing; performance may be lower depending on host device, interface, usage conditions and other factors. 1MB=1,000,000 bytes.)
  • Back up your content and memories on a storage solution that fits seamlessly into your mobile lifestyle.
  • Take it with you on your adventures—up to two-meter drop protection means this durable drive can take a beating. (Based on internal testing.)
  • Secure it to your belt loop or backpack for extra peace of mind thanks to the tough rubber hook.
  • From Sandisk, a brand professional photographers trust to take on assignments.

What happened and when

Date What is established
February 2024 Evolve said files were accessed during a February period. A later breach report listed February 9 as the initial compromise date; that specific date should be treated as reported, not as an independently confirmed forensic finding.
May 2024 Evolve said attackers accessed or downloaded additional information and encrypted some data.
Late May 2024 Evolve noticed that some systems were not functioning properly.
May 31, 2024 Evolve said it had seen no new unauthorized activity after this date.
June 14, 2024 The Federal Reserve and Arkansas state banking regulator issued an enforcement action concerning Evolve’s regulatory and risk-management deficiencies.
June 2024 LockBit claimed a Federal Reserve breach and later posted data associated with Evolve.
June 26–27, 2024 Evolve publicly confirmed that data had been stolen and posted online.
July 1, 2024 The later settlement notice says Evolve began notifying individuals whose information may have been compromised.
August 6, 2024 Evolve published a fuller incident notice and customer guidance.
November 14, 2025 The settlement’s final-approval hearing was held.
December 15, 2025 The final approval order was entered.
March 30, 2026 Payments for approved settlement claims were issued.
September 28, 2026 Uncashed settlement checks are scheduled to become void.

Sources: Evolve substitute notice, Evolve incident notice, Insurance Journal reporting and the settlement administrator.

What information may have been exposed?

Evolve’s substitute notice said affected files appeared to include some combination of:

  • Names and contact information
  • Social Security numbers
  • Evolve account numbers and dates of birth
  • Debit-card numbers for a smaller portion of people
  • ACH transaction records containing account numbers, routing numbers, and names of payors and payees

Settlement materials also identify possible driver’s-license numbers and bank account numbers. These are categories that may have appeared in affected files—not a finding that every person had every data element exposed.

Rank #3
Sale
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400)
  • Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition no software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Who could be affected?

Evolve said the incident involved personal, mortgage, trust and small-business banking customers, as well as customers of its open-banking partners. Because Evolve supplied banking infrastructure to fintech companies, someone could have provided information to a fintech platform while Evolve stored or processed it as the partner bank.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A breach notification reported approximately 7.6 million Americans affected. That figure comes from breach-notification reporting, not from Evolve’s initial incident FAQ.

The settlement covers people who provided information to Evolve directly or indirectly. The administrator says it may not be able to identify which particular fintech relationship caused an individual’s information to be included. Online lists naming platforms such as Mercury, Affirm, Shopify, Stripe, Bilt, Yotta or Juno should therefore be treated as leads requiring confirmation from the specific company, not proof that every user was affected.

Rank #4
Sale
Sandisk 1TB Extreme Portable SSD, Up to 2000MB/s Transfer Speeds-New Model
  • NEARLY 2X FASTER THAN OUR PREVIOUS GENERATION(8) – move 1,000 high-res photos in under 60 seconds(6) with up to 2000MB/s transfer speeds(2).
  • IP65 RATING AND UP TO 3M DROP PROTECTION(3) – protects against spills and drops.
  • POCKET-SIZED – fits easily in pockets and small bags.
  • SPACE TO OWN YOUR AI CONTENT – speed and capacity to download your high-res clips and photo edits.
  • 256-BIT AES ENCRYPTION(4) – helps keep private files secure with password protection.

Was customer money stolen?

Evolve said it had no evidence that criminals accessed customer funds in the LockBit incident. That is the bank’s statement about this cyberattack, not an independently verified guarantee that every account was unaffected.

Data theft is also different from an inability to access a fintech balance. Separate disputes involving Synapse Financial Technologies, frozen accounts or ledger reconciliation may have affected people’s access to money, but they should not automatically be attributed to this Evolve breach. Exposure of an account and routing number does not by itself prove that a withdrawal occurred.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How Evolve says it responded

Evolve said it reported the incident to law enforcement, stopped the attack, reset passwords globally and reconstructed critical identity and access-management components, including Active Directory. It also said it hardened firewalls and dynamic security appliances, deployed endpoint-detection and response tools, and used backups to restore affected systems.

Best Value
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
  • Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
  • Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
  • To get set up, connect the portable hard drive to a computer for automatic recognition software required
  • This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
  • The available storage capacity may vary.

Those are Evolve’s reported remediation steps. The Federal Reserve’s June 14, 2024 enforcement action remains a separate regulatory matter and should not be presented as proof of a Federal Reserve data breach. See the Federal Reserve enforcement release.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Settlement status in 2026

The Evolve data-breach class-action settlement is no longer accepting claims. The original claim deadline was October 30, 2025. Final approval was entered December 15, 2025, and approved payments were issued March 30, 2026.

If you received a settlement check, deposit it before September 28, 2026, when the administrator says uncashed checks become void. Use only evolvesettlement.com for settlement information. A payment reflects settlement eligibility and a submitted claim; it is not proof that a particular person experienced confirmed fraud.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The settlement described one year of credit monitoring and up to $1 million in identity-theft insurance. Its estimated flat payment was $20, while documented-loss claims could seek up to $3,000, subject to documentation, settlement terms and possible pro rata adjustment.

What affected consumers should do now

  1. Check for a settlement payment. Verify notices and payment status only through the official settlement website. If you have a check, deposit it before September 28, 2026.
  2. Freeze your credit with all three bureaus. Use the official pages for Equifax, Experian and TransUnion. A freeze is free and helps prevent new-credit accounts; you can temporarily lift it when applying for credit.
  3. Review your reports. Obtain reports through AnnualCreditReport.com, the official federally authorized site, and dispute unfamiliar accounts.
  4. Monitor bank and fintech accounts. Watch for unauthorized ACH transactions, transfers and card activity. Replace a compromised debit card, but remember that card replacement does not address exposed Social Security numbers or dates of birth.
  5. Secure online accounts. Change reused passwords, use unique credentials and enable multifactor authentication. Password changes help account takeover but cannot remove leaked identity data.
  6. Expect phishing and recovery scams. Be wary of messages invoking Evolve, LockBit, a fintech brand or the settlement. Do not provide Social Security numbers, bank credentials or upfront fees to unsolicited callers or “dark-web scan” services.
  7. Report actual identity theft. Use the FTC’s official recovery service at IdentityTheft.gov for an action plan and reporting guidance.

Credit monitoring versus a credit freeze

Option What it does Limitation
Credit freeze Blocks most new-credit inquiries and is free. Must be lifted temporarily when you apply for new credit.
Credit monitoring Alerts you to changes or new activity reported to monitored services. Alerts do not prevent every type of fraud and may not show bank-account or ACH activity.
Identity-theft insurance May reimburse certain covered losses or recovery expenses. Coverage, documentation requirements and exclusions depend on the policy.
Bank-account monitoring Helps detect unauthorized ACH and account transactions. Credit reports will not capture every bank-account event.

Paid services such as Experian IdentityWorks, Equifax identity products, TransUnion identity protection, Aura and IdentityForce may provide centralized alerts or insurance features. They are optional: start with free freezes, reports and account monitoring before paying for convenience. Prices and plan terms change, so verify current offers directly with each provider.

Bottom line

The LockBit story was a misattributed “Federal Reserve hack” claim. The released material was identified as Evolve Bank data, potentially affecting millions of direct and indirect customers. Evolve reported no evidence that the attackers accessed customer funds, but the exposed identity and transaction information warrants a credit freeze, report review, bank-account monitoring and continued caution about phishing.

Quick Recap

Bestseller No. 2
Sandisk 1TB Portable SSD, Up to 800MB/s Read Speeds, Black (Old Model)
Sandisk 1TB Portable SSD, Up to 800MB/s Read Speeds, Black (Old Model)
From Sandisk, a brand professional photographers trust to take on assignments.
$188.90
SaleBestseller No. 3
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400)
Seagate 2TB Portable Hard Drive | USB 3.0 (STGX2000400)
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$129.99
SaleBestseller No. 4
Sandisk 1TB Extreme Portable SSD, Up to 2000MB/s Transfer Speeds-New Model
Sandisk 1TB Extreme Portable SSD, Up to 2000MB/s Transfer Speeds-New Model
IP65 RATING AND UP TO 3M DROP PROTECTION(3) – protects against spills and drops.; POCKET-SIZED – fits easily in pockets and small bags.
$249.99
Bestseller No. 5
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
Seagate Portable 5TB External Hard Drive HDD – USB 3.0 for PC, Mac, PS4, & Xbox - 1-Year Rescue Service (STGX5000400), Black
This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable; The available storage capacity may vary.
$229.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More post from the Money Desk

  1. The Money DeskBlogTheFinanceBase09 OCT 267 minMortgage Escrow FAQs: Taxes, Insurance, Shortages, and Refunds
  2. The Money DeskBlogTheFinanceBase09 OCT 265 minHow Mortgage Escrow Accounts Work and What Homeowners Pay For
  3. The Money DeskBlogTheFinanceBase09 OCT 265 minHow to Read a Stock Chart, Volume and Market-Cap Data
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.