Bankdata

Truist Financial Corporation operates as a top-10 U.S. commercial bank with $544 billion in assets, serving approximately 15 million clients across a 17-state footprint plus Washington, D.C. The institution maintains 1,900+ branches nationwide while simultaneously developing digital banking solutions - a dual infrastructure that creates a complex attack surface requiring defense across both legacy branch systems and modern cloud-native platforms. For security practitioners, this represents the full spectrum of financial services threat modeling: protecting physical locations, securing distributed client data, hardening mobile and web applications, and defending against the nation-state and criminal actors that consistently target institutions of this scale. The bank's technical domains span branch banking operations, digital banking platforms, and client services infrastructure - each with distinct security requirements. Branch operations demand point-of-sale security, physical access controls, and secure cash handling systems. Digital solutions require application security, API protection, and continuous authentication mechanisms. The sheer client volume - 15 million individuals and businesses - means any vulnerability carries significant blast radius, and regulatory scrutiny from federal banking oversight bodies is constant and rigorous. Truist's purpose-driven banking mission emphasizes community investment and client well-being, which translates operationally to high availability requirements and zero tolerance for service disruption. Security teams here aren't just protecting data; they're protecting community trust and financial stability across nearly a fifth of U.S. states. The company culture emphasizes collaboration, accountability, and professional development resources, including comprehensive benefits and ongoing learning opportunities - infrastructure that matters when building security teams capable of defending against sophisticated threats while managing compliance across multiple regulatory frameworks.

We're a digital bank that's been around since before online banking was cool - we launched on July 4, 2000, as one of the first fully digital banks in the country. Our founders chose Independence Day for a reason: they wanted to break free from the traditional banking model with its expensive branches and hidden fees. Today, we've grown to over $20 billion in assets while staying true to our digital roots. We're headquartered in San Diego, but we serve customers nationwide without the burden of a costly branch network weighing us down. What we actually do is pretty straightforward: we offer checking, savings, mortgages, auto loans, and business banking through our website and mobile app. Our team builds the technology that makes banking work online - we're not just putting a mobile interface on an old bank system. We're publicly traded on the New York Stock Exchange (AX), FDIC insured, and we've been profitable for years because we don't have to pay for hundreds of physical locations. That means we can offer better rates and fewer fees to our customers.

In 1904, Amadeo Peter Giannini founded the Bank of Italy in San Francisco with a revolutionary vision: to serve immigrants and working-class individuals who were ignored by traditional banks. Operating from a converted saloon in North Beach, Giannini's institution began with a single teller and a mission to provide financial access to those who needed it most. This commitment to inclusion and innovation would become the foundation of what eventually became Bank of America. Through strategic mergers and a steadfast focus on community banking, the institution expanded across California and beyond, transforming from a local bank serving immigrants into one of the world's largest financial institutions. Today, Bank of America serves approximately 67 million consumer and small business clients across the United States and operates in more than 35 countries globally. Guided by the question "What would you like the power to do?" the company delivers a full range of banking, investing, asset management, and other financial and risk management products and services. Under the leadership of CEO Brian Moynihan, the bank is committed to responsible growth - a strategy that combines driving economic growth with creating sustainable value for clients, teammates, communities, and shareholders. With more than 210,000 employees worldwide, Bank of America continues to build on its legacy of innovation, using technology to make financial lives better through the power of every connection.

SouthState Bank operates a multi-state financial services infrastructure spanning eight states - Florida, Texas, the Carolinas, Georgia, Colorado, Alabama, Virginia, and Tennessee - serving 1.8 million customers through hundreds of branch locations and a nationwide correspondent banking division. The threat surface is substantial: consumer and commercial banking platforms, mortgage origination systems, wealth management tools, and digital banking channels all running simultaneously across a geographically distributed network with more than 5,000 employees. The attack vectors are standard for regional financials but compounded by scale - phishing campaigns targeting branch staff, credential stuffing against customer portals, ransomware risk across legacy and modern infrastructure, and the persistent challenge of securing third-party integrations in correspondent banking operations. The security posture has to account for both traditional branch banking workflows and digital tooling, which means defending everything from customer-facing mobile apps to internal systems like LaserPro and DecisionPro alongside the Microsoft Office stack. Growth through strategic mergers and acquisitions since the 1930s suggests a patchwork of acquired technology estates that need normalization - a common friction point for detection engineering and identity management. Correspondent banking adds regulatory complexity under Bank Secrecy Act and FinCEN requirements, demanding robust transaction monitoring, anomaly detection, and audit trails. The company is publicly traded on NYSE as SSB, which brings SEC disclosure obligations and makes incident response planning business-critical. Any material breach triggers reporting requirements and reputational exposure in a sector where trust is the product. For security practitioners, the environment presents the full finserv stack: endpoint protection across branch networks, SIEM correlation for fraud detection, cloud security for digital banking platforms, and the operational discipline to manage risk across a multi-state retail footprint while keeping pace with evolving regulatory frameworks.

HSA Bank manages tax-advantaged benefit accounts for 3 million individuals and 30,000 employers across the United States. Founded in 1997 as a medical savings account provider, the company added HSAs in 2004 and now operates digital platforms that handle benefits lifecycle management and personalization at scale. The threat model: securing financial and health data for millions of account holders while maintaining compliance across a regulated financial services environment that touches payroll systems, insurance carriers, and third-party administrators. The technical stack centers on data analytics and personalized digital experiences - systems that ingest, process, and protect sensitive PII and PHI across the benefits enrollment and administration lifecycle. With 6,500 agents, brokers, and consultants accessing platform tools, the attack surface spans partner integrations, API endpoints, and client-facing portals. The security team operates in a domain where a breach doesn't just mean stolen credentials; it means compromised health records, financial accounts, and compliance violations under HIPAA and financial regulations. The scale creates specific challenges: maintaining data integrity across millions of accounts, securing integrations with employer payroll systems, and monitoring access patterns across a distributed partner network. This is financial services security with healthcare compliance layered on top - two regulatory frameworks, one platform, and the operational demand to keep benefits administration running without interruption.

TF Bank is a fast-growing digital credit and payment platform operating in 14 European countries. Through our proprietary IT infrastructure, we develop simple and flexible payment and financing solutions for millions of customers. Since our founding in 1987, we have consistently combined growth with profitability, and following the stock market listing in 2016, this development has continued with a strong focus on scalability and automation. Today, TF Bank serves customers across Sweden, Norway, Finland, Denmark, Estonia, Latvia, Lithuania, Poland, Germany, Austria, Ireland, Netherlands, Italy, and Spain. Our three core segments - Consumer Lending, Ecommerce Solutions, and Credit Cards - deliver deposit products, unsecured consumer loans, digital payment solutions, and credit cards. With over 35 years in the consumer credit sector, TF Bank has maintained profitability throughout its operations while expanding from a Swedish base to become a pan-European provider listed on Nasdaq Stockholm.