Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible First Secure Bank and Trust data breach. According to dark web monitoring sources, a hacker group calling itself Storm claimed responsibility for a cyberattack on First Secure Bank and Trust in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, First Secure Bank and Trust has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About First Secure Bank and Trust
First Secure Bank and Trust is an FDIC-insured community bank headquartered at 10360 S Roberts Road in Palos Hills, Illinois. Originally founded in 1977 as 1st State Bank and Trust, it was later renamed Family Bank & Trust Co. in 2000 and then First Secure Bank & Trust Co. in 2009. In 2018, it formed a holding company, First Secure Bancorp, Inc. The bank offers personal and business deposit accounts, commercial loans including commercial real estate loans, checking accounts, and investment advice. It has expanded to additional branch locations across Chicago’s south suburbs and reports over $360 million in assets as part of First Secure Bank Group, which holds assets exceeding $1.1 billion.
What Happened?
First Secure Bank and Trust was listed in a ransomware leak-site allegation reported by Ransomware.live. On September 18th, 2026, the Storm ransomware group — also tracked as Storm-1175 by Microsoft Threat Intelligence — posted a claim on its dark-web leak site alleging it had attacked the bank. The claim was indexed by Ransomware.live. No independent confirmation from First Secure Bank and Trust, regulators, or credible news outlets has been found. The description accompanying the attacker’s post consists entirely of boilerplate text scraped from the bank’s own “About Us” materials. No data types, data volume, breach date, or other incident-specific details were specified in the claim.
Storm-1175 is a known active threat actor assessed by Microsoft as financially motivated, with previously reported ties to Medusa ransomware and activity beginning at least as early as August 2026. The group has been observed deploying a custom ransomware payload called StormEncryptor and exploiting CVE-2026-18577, an authentication-bypass vulnerability in N-able N-central remote monitoring and management software. Multiple other victims across various industries have been claimed by the group during August and September 2026. No evidence specifically links those tactics to the claim involving First Secure Bank and Trust. No class action lawsuits or public litigation connected to this incident have been found as of September 18th, 2026.
Key Facts at a Glance
- Company or Organization: First Secure Bank and Trust
- Industry: Financial Services — Community/Commercial Banking (FDIC-insured)
- Location: Palos Hills, Illinois (headquarters), with additional branches in Chicago’s south suburbs
- Incident type: Ransomware claim (unverified attacker-side allegation)
- Source: Ransomware.live — Victim: First Secure Bank and Trust, GBHackers — Storm-1175 Launches StormEncryptor Ransomware Attacks, Femtosec — Storm Ransomware Targets Exposed RMM Infrastructure, Tech-Insider — StormEncryptor Hits N-able Bug
What Should You Do?
If you are a customer of First Secure Bank and Trust, it is prudent to take protective steps even while this claim remains unverified. Monitor your bank and financial accounts closely for any unauthorized transactions. You can place a fraud alert or a credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent new accounts from being opened in your name. Review your credit reports for free at AnnualCreditReport.com. If you suspect your information has already been misused, visit IdentityTheft.gov for step-by-step guidance on what to do next.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
