Gang shares ‘juicy bank information’ from Federal Reserve ‘hack’ on the dark web

Published:

Russian-linked gang threatens to release ‘juicy banking information’ from Federal Reserve: Cybersecurity experts analyze the situation

A Russian-linked gang known as LockBit has threatened to release “juicy banking information” stolen from the Federal Reserve if their demands are not met. The cybercriminals claimed to have ransomed 33 terabytes of data from the central bank, giving US officials a deadline to pay an undisclosed amount.

Despite the threat, experts have speculated that this may be a ploy by LockBit to gain attention and improve their standing in the hacking community. The group uploaded financial information on the dark web, but it only included links to a Federal Reserve press release from mid-June and data from a previous hack on Evolve Bank and Trust.

LockBit’s power seems to have been diminished after a major international law enforcement operation named Cronos seized their ransomware infrastructure. The Federal Reserve has been contacted for comment on the situation.

The gang revealed the central bank as their latest victim in a statement on the dark web, threatening to release the stolen data. The announcement mentioned the Federal Reserve’s operation in twelve banking districts across the country.

With 33 terabytes of banking information at stake, cybersecurity experts are analyzing the uploaded links to determine the extent of the data breach. While news broke that LockBit had uploaded 21 links to the dark web, there is still no trace of the supposed “secret” files.

HackManac, a company that analyzes cyber attacks, posted about a cease and desist order issued by the Federal Reserve against Evolve Bank & Trust for deficiencies in risk management and compliance. The links on the dark web site lead to directories containing data belonging to Evolve Bank.

The situation remains ongoing as authorities work to assess the extent of the data breach and the potential impact on the Federal Reserve and Evolve Bank.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

Senators highlight spyware risks from targeted ads, call for industry reform

Recent findings from a report by the Citizen Lab and Confiant have prompted U.S. Senators Ron Wyden and Cory Booker to call for significant...

PHP addresses critical security vulnerabilities allowing potential remote code execution

PHP has released a critical security update addressing vulnerabilities that could allow attackers to execute commands on any web server running the language. This...

Critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619 identified by Unit 42

Recent findings from Unit 42 have identified critical vulnerabilities in PHP, specifically CVE-2026-109618 and CVE-2026-109619, which could allow attackers to execute arbitrary code on...

Compromised LiteLLM 1.107.0 package leads to widespread credential theft via Python startup hooks

On October 21, 2026, a compromised version of the LiteLLM 1.107.0 package was uploaded to the Python Package Index (PyPI), leading to significant credential...