John Z Black

John Z Black Apr 27, 2026 Incidents & Breaches #ransomware #banking #vendor-risk #everest #supply-chain

The breach wasn’t at the bank. It was at the company printing their letters.

Citizens Bank and Frost Bank are both dealing with a massive data spill after the Everest ransomware group listed them on their leak site. The banks’ core systems are fine, but their outsourced vendors for statement printing and tax forms were hit hard. We are talking about 3.4 million records and 250,000 Social Security numbers sitting in a leak forum.

This is the “Multiplier Effect” of concentration risk. Attackers don’t have to hack the bank. They just hack the bank’s cheapest contractor. Whether it is document processing for Citizens or logistics for Wincanton, the digital supply chain is proving to be our weakest link.

If you bank anywhere, you need to understand that your data is only as safe as your bank’s most obscure vendor.

Read the full analysis of the “GLBA Gap” and find out what you should rotate if your bank was hit.