Alabama Bank Hit by Ransomware and Class Action Lawsuits

On June 16, 2026, River Bank & Trust — an Alabama-based financial institution with locations across the Southeast — discovered that someone had gained unauthorized access to their network. Three days later, they confirmed that ransomware had spread across portions of their server environment.

The bank filed an SEC 8-K report on June 25, disclosed that data had been removed from the network, and acknowledged that at least four class action lawsuits were already being filed against them.

Why a bank attack matters to your small business

You are not a bank. You do not hold millions in deposits or process thousands of daily transactions. But if your business handles customer data — names, emails, payment information, employee records — you are subject to the same legal exposure that landed River Bank & Trust in court.

The attack timeline is the part that should concern you most:

• Day 1 (June 16): Unauthorized access begins
• Day 4 (June 19): Ransomware identified
• Day 9 (June 25): SEC filing and lawsuits initiated

The gap between “someone is in your network” and “you know someone is in your network” is where damage happens. For a bank, that window was three days. For most small businesses, it is weeks or months.

What this means for liability

The class action lawsuits against River Bank & Trust are not about the ransom. They are about the data that was removed, the customers whose information was exposed, and the business disruption that followed.

When you hold customer data, you are the custodian of their trust. If that data is stolen because your security was inadequate, the legal exposure is real — regardless of your business size.

• Customers can sue if their data was exposed due to insufficient security
• Regulators can fine if you failed to meet industry standards (PCI-DSS for card data, state breach notification laws)
• Insurance may not cover everything — many policies have exclusions for known gaps in security

What to do next

If you are storing customer data and cannot answer “yes” to each of these questions, you have a problem:

• Do you encrypt customer data when it is stored and when it is transmitted?
• Do you monitor your network for unauthorized access?
• Do you have an incident response plan that covers the first 24 hours after discovery?

Book a free 15-minute consultation and I will walk through your current data handling practices, identify where a real breach would expose you to liability, and recommend the minimum security measures that keep both your customers and your business protected.

Sources: SEC 8-K filing (June 25, 2026), WSFA coverage