Ransomware needs a way in. Stolen credentials are the cheapest one.

BOK Financial Ransomware Attack

bokfinancial.comData extortion

shinyhuntersGroup

United StatesCountry

Aug 22, 2026Discovered

Data has been published on the ransomware group's leak site.

Overview

View group profile

Domain

bokfinancial.com

Industry

Government & Defense

Country

United States

Discovered

about 2 months ago

Attack date

Aug 22, 2026

Confidence

70%

Severity

Critical

Status

Data Leaked

Threat group

shinyhunters

Total victims

112

First seen

Jan 2026

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

120

Threat level

5.5/10

Aggressiveness7/10

Lethality2.6/10

Criticality7.1/10

Status breakdown

Data Leaked

this victim

52.7%59

Negotiating2.7%3

Claimed44.6%50

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Government & Defense

Known target sector

Country

United States

Frequently targeted country

Other victims

View all (112)

Same group · shinyhunters

Group activity

Monthly attacks · shinyhunters

112

total · avg 11.2/mo