River Financial “took steps to attempt to suppress the affected data, including obtaining representations from the threat actor that it deleted the data.”
A bank told its regulator that the criminals promised to delete the stolen files. That is the remediation plan. Extortion crews have been caught holding data after payment for years, which is the entire point of holding it. River Financial is not protecting customers here. It is building a paper trail that lets it say it did something.