Cyberattacks on Banks

The financial sector is up to 300 times more likely to be the victim of cyberattacks than other sectors. Cyberattacks on banks have become more prevalent and sophisticated and can result in significant data breaches.

To prevent cyberattacks and protect sensitive information from a data breach, banks must invest in cybersecurity measures such as firewalls, intrusion detection systems and encryption technologies. Bank employees should be trained to recognize cyberthreats and learn best security practices.

Morgan Stanley experienced one of the biggest data breaches in banking history. In 2022 the bank agreed to a $60 million settlement and paid a $60 million fine after hard drives it decommissioned were found to have not been properly wiped clean before re-sale. The drives contained sensitive personal client information.

JPMorgan Chase suffered one of the largest data breaches in history in 2014. Hackers exploited an employee’s access credentials and stole the sensitive personal information of more than 80 million households and businesses.

First American Financial Corp experienced a data breach in 2019 that exposed more than 800 million sensitive records. While investigators found no evidence of misuse of the exposed data, First American Financial paid a $500,000 fine.

Also in 2019, Capital One experienced a major data breach when a hacker gained access to a storage system and compromised the personal information of more than 100 million customers. Capital One compensated affected customers with a payout of $190 million. It also paid an $80 million fine.

The banking industry, like other industries, struggles to ensure complete cybersecurity. The popularity of online banking is growing and third-party vendors and partnerships are expanding. Significant data gaps still exist for assessing and mitigating cyber vulnerabilities.

Former FBI Director Christopher A. Wray compared the threat of ransomware to the challenge of global terrorism. Software security experts need more research to determine how cyber vulnerabilities originate in and are transmitted across the banking sector. Until then, banks will continue to be vulnerable to various cyberattacks, from ransomware to social engineering schemes.

Ransomware

Ransomware is malicious software that someone gets tricked into downloading. Once installed, the software encrypts files and then demands payment in exchange for the decryption key. Ransomware attacks against banks, credit unions, utilities, healthcare systems and other institutions are on the rise. The effects of even isolated incidents can ripple outward and disrupt banks around the world.

Social Engineering

Social engineering uses psychological manipulation to deceive people into revealing sensitive information or making security mistakes. These attacks can take many forms, including phishing, pretexting, dumpster diving, scareware, baiting, tailgating, spear phishing and quid pro quo schemes.

One successful attack directed bank clients to phone a fake bank employee, who then elicited the victim’s banking details to steal money from their accounts. Like confidence schemes, social engineering attacks will evolve as banks deploy new technologies, like artificial intelligence. 

Remote Work 

With more endpoints and devices accessing the bank’s network, remote work increases the attack surface for cyber criminals. Some employees may use unsecured public Wi-Fi networks or personal devices to access their bank’s network. That makes them more vulnerable to cyberattacks. Remote work could potentially make it more difficult for bank managers and IT professionals to monitor employee activity and ensure that employees are following established cybersecurity policies and procedures.

Cyberattacks on banks can affect bank customers. Theft of customers’ personal and financial information, such as credit card numbers and bank account details, can lead to unauthorized transactions and financial losses. Cyberattacks can also result in identity theft, where criminals use stolen personal information to open new accounts, take out loans, or engage in other fraudulent activities.

A major cyberattack can also disrupt global financial networks and services, especially payments systems. It would also sow confusion and panic in banks, governments, businesses and consumers around the world, with potentially severe impacts on economic activity and political governance.

Malicious cyber actors can exploit vulnerabilities in your home network to gain access to sensitive personal and financial information. Protect yourself and your financial health by securing devices and networks, practicing cybersecurity-aware behaviors and implementing the following security best practices.

If your bank experiences a cyberattack that exposes customers’ personal or financial information, you can file a data breach lawsuit. These are often class-action litigations.

Filing a data breach lawsuit related to cyberattacks can be complex, but an expert attorney can help you seek compensation for the harm caused and hold responsible parties accountable. To file a successful legal claim, you need evidence that shows how the cyberattack happened, who was responsible and how it caused harm to you or your organization.