Banco Estado (Public Bank) Listed by revil Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On September 7, 2020, Banco Estado (Public Bank) appeared on a leak site operated by the revil ransomware group. The listing indicated that internal files had been taken during a ransomware incident. The number of people affected remains unknown, and no further confirmation of the data’s release or scope has been made public. This incident reflects a pattern seen across the financial sector in 2020, where ransomware operators began publishing victim names to increase pressure for payment. Public disclosure of such listings allows observers to track claims without independent verification of the underlying breach.

What happened

Banco Estado (Public Bank) was listed on the revil ransomware leak site. The group claims to have stolen internal data. No date of the initial intrusion, volume of files, or confirmation of encryption was reported. The number of individuals whose information may be involved is not stated in available records.

The group behind it: revil

REvil, also tracked as Sodinokibi, was a ransomware operation active in 2020 that used affiliate-based distribution to deploy its malware. The group commonly employed double-extortion tactics, encrypting systems and threatening to publish stolen files if a ransom was not paid. Prior public reporting has linked the same operators to incidents against other large organizations, though each listing on their site represented an unverified claim by the group itself.

Who is Banco Estado (Public Bank)?

Banco Estado is a state-owned bank that provides retail, commercial, and government-related financial services. Institutions of this type maintain records that include customer account details, transaction histories, and internal operational documents. A claim involving such an organization draws attention because of the volume of sensitive financial information typically held by public banks.

The information in question

The only detail released is that internal files were allegedly exfiltrated. No inventory of specific data categories has been published, and independent confirmation of the contents is unavailable.

• Internal files exfiltrated in ransomware attack
• Exact data categories and volume undisclosed

The real-world impact

Individuals connected to the bank face the possibility that account or identification details could be used for fraud or targeted scams. The organization itself may incur costs related to investigation, remediation, and regulatory review. Because the precise data set remains unconfirmed, the scale of any downstream effects cannot be quantified from public information alone.

Were you affected?

Customers of Banco Estado should review recent account statements for unusual activity and enable any available transaction alerts. Organizations advise changing passwords for online banking portals and monitoring credit reports where applicable. Readers can run a free exposure scan of their email address against known breach data to check for appearances in previously published lists.

AICompiled with AI assistance from public sources and published under our editorial standards.