Evolve Bank & Trust data breach
Was I affected?
Evolve Bank & Trust confirmed a breach affecting about 7.6 million people, exposing names, Social Security numbers, dates of birth and addresses. You may be affected if you used a fintech or app whose bank partner was Evolve (check your app's notices) or banked with Evolve directly, and received an Evolve email or letter.
| Announced | Jun 26, 2024 |
|---|---|
| When it happened | February-May 2024 |
| People affected | 7.6 million |
| Data exposed | Names, Social Security numbers, Dates of birth, Addresses, Phone numbers, Email addresses and Bank or financial details |
| Status | Confirmed by the company or a regulator filing |
What happened
Evolve Bank & Trust, the bank behind accounts at fintech apps such as Affirm, Wise and Mercury, confirmed that the LockBit gang stole customer data and leaked it after the bank refused to pay. Its Maine filing put the count at about 7.64 million people, with names, Social Security numbers, dates of birth, contact details and bank account numbers exposed. Customer funds were not accessed.
What should I do?
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Watch the bank and fintech accounts linked to Evolve for unknown withdrawals and report them right away.
- Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
- Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
Is there a settlement?
Evolve Bank & Trust data breach settlement (about $11.8M); the claim deadline was October 30, 2025, so new claims are closed.
Check the other services you use →
Sources
- Evolve Bank & Trust confirms LockBit stole 7.6 million people's data · The Register (news)
- Cyber-attack on Evolve Bank exposed data of 7.6 million customers · Infosecurity Magazine (news)
- Evolve to settle data breach lawsuit for nearly $12M · Banking Dive (news)