MalwareFinancial ServicesTechnologyFinanceRansomwareSupply Chain (3P Vendor)Data EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Linedata Services Inc.

bd_03f3acf704579a0b · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 23, 2025

Filed

Nov 24, 2025

To disclose

5 weeks

Affected · nationwide

2,8785 in this filing

Linked

5 filings

Confidence

65%

BOKF, NA reported a cybersecurity incident involving its vendor, Linedata Services Inc. The incident, described as malicious encryption of data (ransomware), occurred on August 11, 2025. BOKF discovered the involvement of its clients' personal information on October 23, 2025. Affected data included names and Social Security numbers. 2,878 individuals were affected, including 5 Maine residents. Notification was sent on November 24, 2025, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 23, 2025 → Filed with AG Nov 24, 202532d ⏱ ME AG >30d5 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 73 days

discovery → filing · 5 weeks / 32 days

Aug 11, 2025

Begins

Oct 23, 2025

Discovered

Nov 24, 2025

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteshinyhuntersbd_7e750e54857c40c52026-08-22 · +271dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_db57d1dcced26a5a2025-11-24Verified by operator
Massachusetts State AGbd_f70f9d86382d9a232025-11-25 · +1dVerified
Vermont State AGbd_59f5225ae51203612025-11-26 · +2dVerified

Name: Bokf, Na
norm: bokf na
Domain: bokfinancial.com
Industry: Financial Services

Name: Linedata Services Inc.
norm: linedata services
Domain: bokfinancial.com
Industry: Technology
Industry: Financial ServicesllmTechnologyllm

Discovered: Oct 23, 2025
Breach occurred: Aug 11, 2025
Undetected for: 73 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 24, 2025
Affected individuals: 2,878state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Third party: via Linedata Services Inc.
Initial access: supply_chain

During the incident: Closely monitoring communications with Linedata for updates on its forensic investigation
Providing free credit monitoring services for one year through TransUnion/Cyberscout
Notifying affected individuals via written notice
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: ME AG >30d · 32d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 23, 2025
→ Filed with AG: Nov 24, 2025
32d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 23, 2025 → Filed with AG: Nov 24, 2025	32d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGNov 24 · first

Maine State AGNov 24 · first · this page

Massachusetts State AG+1d

Vermont State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e4734014-0903-4062-add2-31766abfef97.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 24, 2025
Raw hash: fe55854c5dfd75bd73d052d6d7cd33289894bc33a0ea82ce43841624ce544bcf

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityBokf, Na

Victim entityLinedata Services Inc.

Incidentdiscovered Oct 23, 2025

Stated responseClosely monitoring communications with Linedata for updates on its forensic investigation

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov