LockBit just named the 7th-biggest bank in America as a victim — with zero proof to back it up

The ransomware gang gave itself two weeks and gave the bank exactly nothing to substantiate the claim — and that gap between accusation and evidence… Aliteq Priya Nair · Software & Systems Editor

LockBit 5 listed U.S. Bancorp on its leak site August 20, 2026, with a roughly two-week payment deadline.

What we actually know

No data samples or proof of compromise have been published by LockBit as of this writing.

What we actually know

U.S. Bancorp says its own systems, networks and data repositories show no evidence of compromise.

What we actually know

The bank instead points to a 'fourth-party' incident — a contractor working for one of its vendors, not U.S. Bancorp itself.

What we actually know

LockBit was disrupted by law enforcement's Operation Cronos in 2024 and has been rebuilding since; the group is estimated to have collected $252.4 million from 353 attacks between 2022 and 2024.

What we actually know

At this time, there is no evidence that our systems, networks or data repositories were compromised.

Read the full story

Aliteq LockBit just named the 7th-biggest bank in America as a victim — with zero proof to back it up Read the full story on Aliteq