July 2024 Summaries

The Evolve Bank & Trust breach, attributed to the LockBit ransomware group, reportedly exposed up to 33 terabytes of sensitive consumer and financial data, including personally identifiable information, Social Security numbers, bank routing and account numbers, and card numbers, creating heightened risks across Evolve’s banking-as-a-service partners, ACH participants, and the broader fintech ecosystem. The material warns that the unusually complete data set could enable large-scale new-account fraud, synthetic identity fraud, account takeovers, credential stuffing, and unauthorized payments, with indicators including rapid or repeated account registrations, mismatched identity data, suspicious contact or device changes, repeated failed logins, and atypical transactions. It recommends integrated, lifecycle-wide identity controls, cross-organization graph analytics, verification of bank-account ownership, behavioral and device monitoring, and stronger checks for high-risk activities. The latter portion promotes Socure’s identity-fraud tools, which it says use a network of institutions, AI-based models, document and selfie verification, risk scores, and device and behavioral intelligence to detect coordinated attacks, protect existing accounts, and reduce misuse of stolen banking credentials.