A ransomware group operating under the name Storm has posted a listing claiming to have compromised systems belonging to First Secure Bank and Trust, with the claim dated September 18, 2026. This listing was identified by ransomware.live, a security research platform that monitors the public leak sites operated by ransomware groups. At this stage, the claim originates solely from the group itself and has not been independently verified by any outside party, by First Secure Bank and Trust, or by any regulatory body.
Separating what Storm has stated from what remains unconfirmed
- The claimed date of the incident is September 18, 2026, according to Storm’s own leak-site posting.
- First Secure Bank and Trust operates in the finance sector, a segment frequently targeted by extortion-focused ransomware crews due to the sensitivity of customer financial and account records.
- Storm has not published, and researchers have not independently confirmed, which specific categories of data may have been accessed or copied — no record counts, file types, or customer details have been substantiated.
- No statement from First Secure Bank and Trust confirming or denying the incident has been located at the time of this writing.
Steps customers and account holders may want to consider now
- Update online banking passwords and avoid reusing them across other financial or email accounts.
- Turn on two-factor authentication for banking, email, and any linked financial apps if it isn’t already active.
- Be cautious of unexpected calls, texts, or emails referencing this institution, especially those urging urgent action or requesting login details — these are common follow-up tactics after a claimed breach.
- Review recent account and card statements for unfamiliar activity and report anything suspicious to the bank directly through verified channels.
- Consider a service like a service like Aura or LifeLock that monitors for identity misuse, since financial-sector claims like this one can sometimes precede attempts at fraud even before any data is confirmed as exposed.
BreachLetter will revisit and update this article if First Secure Bank and Trust issues a public confirmation, if additional detail emerges from credible sources, or if the incident is formally disclosed to regulators.