Evolve Bank & Trust suffered a data breach in May 2024 affecting more than 7 million customers. In August of that year the bank sent the following notice to those who may have had their personal information compromised.
Re: Notice of Data Breach
We are writing to inform you that some of your personal information was recently impacted when Evolve Bank & Trust (“Evolve”) was the victim of a cybersecurity attack. Evolve provides financial services including Banking-as-a-Service products to host accounts and provide mobile banking. This incident did not impact your funds stored with Evolve.
Please read this notice carefully, as it provides up‑to‑date information on what happened and what we are doing, as well as information on how you can obtain complimentary credit monitoring.
What happened?
On May 29, 2024, Evolve identified that some of its systems were not working properly. While it initially appeared to be a hardware failure, we subsequently learned it was unauthorized activity. Evolve promptly initiated its incident response processes and stopped the attack. No new unauthorized activity on Evolve’s systems has been identified since May 31, 2024. An investigation with assistance from a cybersecurity firm was initiated to investigate what happened and what data may have been impacted. Evolve also notified law enforcement and worked to add further protections to harden its systems.
What personal information was involved?
There is no evidence that the threat actors accessed any customer funds, but it appears the threat actors did access and download customer information from Evolve’s databases and a file share during periods in February and May 2024.
Within these downloaded files, Evolve identified the following personal information about you: Social Security Number and Date Of Birth.
What we are doing: Evolve is offering you a complimentary 24‑month membership to TransUnion’s credit monitoring and identity theft protection services. We are also providing you with proactive fraud assistance to help with any questions that you might have or in the event that you become a victim of fraud. These services will be provided by Cyberscout, a TransUnion company specializing in fraud assistance and remediation services.
Prior to the incident, Evolve had a significant number of cybersecurity measures in place. Since becoming aware of the incident, Evolve has taken steps to further strengthen its security response protocols, policies and procedures, and its ability to detect and respond to suspected incidents.