MalwareRansomwareSupply Chain (3P Vendor)Data EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
Linedata Services, Inc.
bd_59f5225ae5120361 · schema v1 · pii pii-v1
Full breach record for Linedata Services, Inc. →BOKF, NA notified Vermont consumers of a cybersecurity incident involving its vendor, Linedata Services, Inc. The incident, detected on August 11, 2025, involved malicious encryption of data (ransomware) on Linedata's systems. BOKF determined on October 23, 2025, that consumer names and Social Security Numbers were potentially accessed. BOKF is offering one year of free credit monitoring and fraud assistance.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-26-bokf-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 26, 2025
- Raw hash
- 705520a49dcdb53d202eacbd7e082e19936831a4f071582abb015afe9ff50f46
Reporting entity
- Name
- Bokf, Nanorm: bokf na
- Domain
- bokfinancial.com
Victim entity
- Name
- Linedata Services, Inc.norm: linedata services
Incident
- Discovered
- Aug 11, 2025
- Materiality determined
- Oct 23, 2025
- Notification sent
- Nov 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 15 weeks(107 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.