Comparison Overview

Huntington National Bank

VS

Bank of America

Huntington National Bank

41 S. High Street, Columbus, 43215, US
Last Update: 2026-04-01
Between 750 and 799

Welcome to Huntington. Huntington Bancshares Incorporated is a $210 billion asset regional bank holding company headquartered in Columbus, Ohio. Founded in 1866, The Huntington National Bank and its affiliates provide consumers, small and middle-market businesses, corporations, municipalities, and other organizations with a comprehensive suite of banking, payments, wealth management, and risk management products and services. Huntington operates approximately 972 branches in 13 states, with certain businesses operating in extended geographies. Visit Huntington.com for more information. We are committed to doing the right thing for our customers, colleagues, and communities. Our “Welcome” philosophy means they are at the center of everything we do. Here’s how we look out for people: • We aim to make banking easier for our customers. Our comprehensive suite of innovative banking tools and products is specifically designed to strengthen the financial health of those we serve. • Our internal culture is built around making things great—rather than just good enough—and to be the best place our colleagues will ever work. We offer a flexible work environment with opportunities for growth, and we’ll provide all the resources needed to create a lasting and rewarding career path. • Our $40 billion Community Plan, environmental sustainability strategy, and robust small-business lending program are just a few of the ways we are helping to improve the economic vitality of the areas where we live and work. Explore Huntington Career opportunities at https://huntington-careers.com. Huntington is an Equal Opportunity Employer. The Huntington National Bank, Member FDIC. The logo mark and Huntington® are federally registered service marks of Huntington Bancshares Incorporated. Huntington Social Media Community Guidelines & Terms: http://bit.ly/HuntingtonSocialMedia

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 19,289
Subsidiaries: 10
12-month incidents
0
Known data breaches
0
Attack type number
1

Bank of America

100 North Tryon Street, Charlotte, 28202, US
Last Update: 2026-04-03

Bank of America is one of the world's largest financial institutions, serving individuals, small- and middle-market businesses and large corporations with a full range of banking, investing, asset management and other financial and risk management products and services. The company serves approximately 56 million U.S. consumer and small business relationships. It is among the world's leading wealth management companies and is a global leader in corporate and investment banking and trading. This LinkedIn company page is moderated. For more information, please visit: https://bit.ly/32FDdQr. For account issues, please visit: https://bit.ly/2GeTIeP.

NAICS: 52211
NAICS Definition: Commercial Banking
Employees: 232,516
Subsidiaries: 4
12-month incidents
0
Known data breaches
3
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/huntington-national-bank.jpeg
Huntington National Bank
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bank-of-america.jpeg
Bank of America
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Huntington National Bank
100%
Compliance Rate
0/4 Standards Verified
Bank of America
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Banking Industry Average (This Year)

No incidents recorded for Huntington National Bank in 2026.

Incidents vs Banking Industry Average (This Year)

No incidents recorded for Bank of America in 2026.

Incident History — Huntington National Bank (X = Date, Y = Severity)

Huntington National Bank cyber incidents detection timeline including parent company and subsidiaries

Incident History — Bank of America (X = Date, Y = Severity)

Bank of America cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/huntington-national-bank.jpeg
Huntington National Bank
Incidents

Date Detected: 10/2023
Type:Cyber Attack
Blog: Blog
https://images.rankiteo.com/companyimages/bank-of-america.jpeg
Bank of America
Incidents

Date Detected: 12/2025
Type:Cyber Attack
Attack Vector: Malicious script injection (client-side)
Motivation: Credential theft for potential lateral movement into banking infrastructure
Blog: Blog

Date Detected: 2/2025
Type:Breach
Attack Vector: Inadvertent Disclosure
Blog: Blog

Date Detected: 10/2024
Type:Breach
Blog: Blog

FAQ

Huntington National Bank company demonstrates a stronger AI Cybersecurity Score compared to Bank of America company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Bank of America company has faced a higher number of disclosed cyber incidents historically compared to Huntington National Bank company.

In the current year, Bank of America company and Huntington National Bank company have not reported any cyber incidents.

Neither Bank of America company nor Huntington National Bank company has reported experiencing a ransomware attack publicly.

Bank of America company has disclosed at least one data breach, while Huntington National Bank company has not reported such incidents publicly.

Both Bank of America company and Huntington National Bank company have reported experiencing targeted cyberattacks.

Neither Huntington National Bank company nor Bank of America company has reported experiencing or disclosing vulnerabilities publicly.

Neither Huntington National Bank nor Bank of America holds any compliance certifications.

Neither company holds any compliance certifications.

Huntington National Bank company has more subsidiaries worldwide compared to Bank of America company.

Bank of America company employs more people globally than Huntington National Bank company, reflecting its scale as a Banking.

Neither Huntington National Bank nor Bank of America holds SOC 2 Type 1 certification.

Neither Huntington National Bank nor Bank of America holds SOC 2 Type 2 certification.

Neither Huntington National Bank nor Bank of America holds ISO 27001 certification.

Neither Huntington National Bank nor Bank of America holds PCI DSS certification.

Neither Huntington National Bank nor Bank of America holds HIPAA certification.

Neither Huntington National Bank nor Bank of America holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.

Risk Information
cvss3
Base: 8.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H