East West Bank is the largest publicly traded bank headquartered in Southern California, with over $80 billion in total assets and more than 110 locations spanning the U.S. and China. Founded in 1973 to serve the immigrant Chinese-American community, it operates as a full-service commercial bank positioning itself as a financial bridge between East and West. The bank serves industry verticals including real estate, entertainment and media, private equity and venture capital, and high-tech industries.
For cybersecurity practitioners, the threat model here is shaped by cross-border operations. With a significant footprint in both the United States and China, the bank navigates two distinct regulatory regimes - SOX, GLBA, and state-level data privacy laws on one side, China's Cybersecurity Law and PIPL on the other. That dual jurisdiction means data sovereignty, cross-border data transfer controls, and compliance mapping are not abstract concerns but operational realities. The bank consistently earns top performance rankings from Bank Director and S&P Global Market Intelligence, indicating the kind of stability that tends to accompany mature risk management frameworks.
The attack surface is that of a mid-to-large regional bank with international exposure: commercial banking infrastructure, correspondent banking relationships, SWIFT connectivity, and customer-facing digital channels. Security teams operating in this environment are likely dealing with the convergence of financial-sector targeting - business email compromise, credential harvesting, transaction fraud - alongside nation-state-adjacent espionage risks that come with the geographic footprint. The bank's concentration in high-tech industry lending adds another layer, given the intellectual property and supply chain sensitivities common to that vertical.
