--- title: $1 Million Ransom Demanded From Two Banks description: A new ransomware tactic occurring threatens to disclose confidential bank customer information unless a ransom is paid. Criminals have figured out they can extort bigger dollars using this approach compared to simply locking up a bank president’s workstation with ransomware. This creates far more reputational, legal and regulatory risks for the bank. image: https://insights.bankonitusa.com/hubfs/Blog/boi-pattern-01.jpg --- Sales: [405-653-1920](tel:4056531920) 24/7/365 Support: [1-800-498-8877](tel:18004988877) [Client Portal](https://portal.bankonitusa.com/) [![BankOnITUSA](https://insights.bankonitusa.com/hubfs/BOI-Logo-SVG.svg "BankOnITUSA")](https://www.bankonitusa.com/) - [About](https://www.bankonitusa.com/about/) - [Technology Tour](https://www.bankonitusa.com/about/technology-tour/) - [Solutions](https://www.bankonitusa.com/solutions/) - [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/) - [Acheive Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/) - [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/) - [Client Stories](https://www.bankonitusa.com/client-stories/) - [Saint Louis Bank](https://www.bankonitusa.com/client-stories/saint-louis-bank/) - [Commercial National Bank of Texarkana](https://www.bankonitusa.com/client-stories/commercial-national-bank-of-texarkana/) - [Watermark Bank](https://www.bankonitusa.com/client-stories/watermark-bank/) - [Integrity Bank & Trust](https://www.bankonitusa.com/client-stories/integrity-bank-and-trust/) - [Valliance Bank](https://www.bankonitusa.com/client-stories/valliance-bank/) - [First National Bank of Oklahoma](https://www.bankonitusa.com/client-stories/first-national-bank-of-oklahoma/) - [Lisle Savings Bank](https://www.bankonitusa.com/client-stories/lisle-savings-bank/) - [Bank of Prairie Villiage](https://www.bankonitusa.com/client-stories/bank-of-prairie-village/) - [Insights](https://insights.bankonitusa.com/) - [Billion $ Playbook](https://www.bankonitusa.com/billion-playbook/) - [Careers](https://www.bankonitusa.com/careers/) [Let's Get Started](https://www.bankonitusa.com/lets-get-started/) Nov 10, 2025 # [Information Security Brief - November 2025](https://insights.bankonitusa.com/information-security-brief-november-2025) This Email is Making Me FEEL Something Scammers manipulate your emotions! IS AN EMAIL, TEXT, OR DM MAKING YOU FEEL SUDDEN, URGENT EMOTIONS? “You won o... [Read More](https://insights.bankonitusa.com/information-security-brief-november-2025) - - - - [mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2F1-million-ransom-demanded-from-two-banks](mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2F1-million-ransom-demanded-from-two-banks) [← Return to Blog](https://insights.bankonitusa.com) 31 May, 2018 ## $1 Million Ransom Demanded From Two Banks ## New varieties of ransomware threaten release of thousands of bank customer records. A new ransomware tactic occurring threatens to disclose confidential bank customer information unless a ransom is paid. Criminals have figured out they can extort bigger dollars using this approach compared to simply locking up a bank president’s workstation with ransomware. This creates far more reputational, legal and regulatory risks for the bank. This exact type of ransomware attack happened at two banks over Memorial Day weekend. While individuals in the United States were honoring those who have fought for our country and were spending time with their families, our neighbor to the north was busy fighting a different kind of war. Cyber criminals attacked two Canadian banks and notified major media outlets about their intent to disclose confidential customer information unless a ransom of $1 million was paid within 24 hours, according to authorities. What would you do if ransomware attacked your computer network but did more than lockup files on your computer and demand a ransom of $500? What if instead they exported your customer data to a criminal network that demanded $1 million for the return of your customers’ information? Imagine the impact on you and your staff if the media were alerted and you had a short window of time to determine if a successful attack had occurred, to decide if your bank was going to pay the demanded ransom and what you were going to tell your customers. Cyber-attacks occur against banks every single day, and they are constantly changing. Traditionally, ransomware attacks targeted a single workstation or files on a server. They locked up the files and demanded payment of a few hundred dollars, threatening that without payment data would be irretrievably lost. Ransomware’s most recent variant threatens the bank with reputational risk, regulatory risk and legal risk by publicly releasing confidential customer information unless the bank pays a sizable ransom. The type of bad actors performing these attacks are also changing. Instead of a sole individual cyber attacking for a challenge or for fun, many of these attacks are perpetrated by criminal networks with a profit motive. Many times these cyber criminals are backed by nation-states with substantial resources used to accomplish a successful attack. ### What Can You Do? There are preventative steps your bank can take to help reduce the ransomware threat. Additionally, there are responsive actions that should be planned out ahead of time to help reduce the impact when a ransomware event occurs. Following are some thoughts to consider: - **Keeping Up**: How do you keep up with rapidly evolving threats and ensure you are efficiently and effectively defending against these threats? - **The Right Stuff**: Do you have people with the right knowledge and resources to successfully manage technology risks?  - **Planning**: Have you created a response plan for stopping an attack when one is occurring? When the worst case does happen, the last thing you want to be doing is creating a plan from scratch or spending time discussing what steps need to be taken. When a cyber threat occurs you need a solution that helps you with: - **Crisis Management and Reputational Risk Management**: Will you respond quickly to your customers and community, or will it be a drawn out, painful incident, such as the one with Equifax? - **Regulatory Response**: What is your plan for notifying regulators and handling the subsequent special, and probably more challenging, exams? - **Legal Risk Management**: What can you do ahead of time to reduce risk for the institution and for yourself? - **Cyber Forensics**: Cyber forensics is a must have item. Without this capability, how will you figure out what happened, when it happened and how to fix it? - **Resource Management**: How will you do all of this quickly, do it all at the same time and do it while still operating the bank on a daily basis? Are you confident in the systems, staff, and processes and procedures your bank depends on to prevent you and your customers from becoming the victim of a ransomware attack? BankOnIT was founded to provide banks a more comprehensive solution in a rapidly changing technology environment with evolving cybersecurity threats, providing your bank stronger defenses and a more robust response to keep your bank secure, operational and regulatory compliant. Have questions? Give us a call at [800-498-8877](tel:8004988877), option 2, or at [Solutions@BankOnITUSA.com](mailto:Solutions@BankOnITUSA.com). [← Return to Blog](https://insights.bankonitusa.com) ##### Disclaimer This publication attempts to provide timely and accurate information concerning the subjects discussed. It is furnished with the understanding that it does not provide legal or other professional services. If legal or other expert assistance is required, the services of a qualified professional should be obtained. ### Search ### Subscribe Here! You'll receive our latest updates in your inbox. ### Posts by Tag - [Cybersecurity (52)](https://insights.bankonitusa.com/tag/cybersecurity) - [Reduce Risk (49)](https://insights.bankonitusa.com/tag/reduce-risk) - [Information Security Brief (36)](https://insights.bankonitusa.com/tag/information-security-brief) - [Information Technology for Banking Leaders (15)](https://insights.bankonitusa.com/tag/information-technology-for-banking-leaders) - [Achieve Operational Efficiency (13)](https://insights.bankonitusa.com/tag/achieve-operational-efficiency) - [Strategy (11)](https://insights.bankonitusa.com/tag/strategy) - [CEO Update (9)](https://insights.bankonitusa.com/tag/ceo-update) - [Gain Competitive Advantage (9)](https://insights.bankonitusa.com/tag/gain-competitive-advantage) - [Regulation (5)](https://insights.bankonitusa.com/tag/regulation) - [Information Security Bulletin (2)](https://insights.bankonitusa.com/tag/information-security-bulletin) - [Regulatory Bulletin (2)](https://insights.bankonitusa.com/tag/regulatory-bulletin) - [Press Release (1)](https://insights.bankonitusa.com/tag/press-release) See all ### Popular Posts #### [CEO Update - Q3 2025](https://insights.bankonitusa.com/ceo-update-q3-2025) #### [CEO Update - Q4 2025](https://insights.bankonitusa.com/ceo-update-q4-2025) #### [Information Security Brief - December 2024](https://insights.bankonitusa.com/information-security-brief-december-24) #### [Information Security Brief - July 2025](https://insights.bankonitusa.com/information-security-brief-july-2025) ## Submit your comment Upon completion you will be automatically redirected to the electronic Authorized Resellers Agreement. ## Related Posts Ready to do MORE with BankOnIT? [Let's Get Started](https://www.bankonitusa.com/lets-get-started/) **Receive BankOnIT Insights.** Get timely information on cybersecurity, regulation, and other trends impacting your bank. #### About - [Overview](https://www.bankonitusa.com/about/) - [Technology Tour](https://www.bankonitusa.com/about/technology-tour/) #### Solutions - [Overview](https://www.bankonitusa.com/solutions/) - [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/) - [Achieve Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/) - [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/) #### Contact - [Support: 1-800-498-8877](tel:18004988877) - [Sales: 405-653-1920](tel:4056531920) #### Social - [Follow Us On LinkedIn](https://www.linkedin.com/company/bankonitusa/) ![BOI-Logo-PNG](https://insights.bankonitusa.com/hubfs/BOI-Logo-PNG.png "BOI-Logo-PNG") © 2023 BankOnITUSA, LLC.[Privacy](https://www.bankonitusa.com/privacy-policy/)