Financial institutions are seeing a surge in attacks that could put any of them at risk for a security breach. According to USA TODAY, an FBI official recently reported more than 500 million records have been stolen from financial institutions over the past 12 months as a result of cyberattacks. According to lawmakers, the financial sector in the United States is one of the most targeted in the world, resulting in hefty costs and liabilities for organizations and customers exposed to identity theft and fraud.

The increased targeting of financial institutions is echoed in research from PricewaterhouseCoopers, which found that 45 percent of financial institutions have suffered from economic crime in the past year, compared to 34 percent across all other industries. It found that the top threats to the financial sector are asset misappropriation (67 percent), followed by cybercrime (39 percent), though it is becoming increasingly common.

Top Targets

Over the past few years, large U.S. banks have been subjected to a barrage of cyberattacks, which have been extremely costly. According to reports, Citigroup, Bank of America and Wells Fargo showed a 0.4 percent to 0.9 percent drop in their stock prices as a result of attacks, while JPMorgan Chase saw its share price fall by 1 percent after a security breach.

In the JPMorgan Chase breach, names, addresses, phone numbers, email addresses and internal information related to 83 million customers were stolen by attackers. The company reported it had not seen any fraud related to the incident, though the attack — in which cybercriminals were able to gain a high level of system privileges on more than 90 servers — went unnoticed for some two months.

Already spending $250 million per year on digital security, JPMorgan Chase has pledged to double that spending over the next year as a direct result of the security breach and has increased the number of security professionals it employs to 1,000. It has also reviewed its security procedures, including access controls, to strictly limit privileged user access in order to avoid “catastrophic technical or reputational damage.” USA TODAY reports that Bank of America is also spending hundreds of millions of dollars on security, and that amount continues to grow.

The Cost of a Security Breach

A recent report by the New York State Department of Financial Services found the deployment of additional security measures was only the third most costly impact of cybersecurity breaches. The top factors included in calculating monetary loss are customer reimbursements and audit and consulting services. Some institutions factored in customer business and brand or reputational damage, though they are considered difficult to quantify. Compliance Week also reported that JPMorgan Chase is facing a probe by the attorneys general of 19 states, which could be quite costly.

Attacks such as these show that even though large financial institutions spend vast amounts of money on information security, there can still be gaps. All organizations should take and maintain inventories of all their assets on the network and should assess the risks that different classes of assets face. They should also ensure employees are adequately trained in security awareness since they are on the front line and can be helpful in spotting potential vulnerabilities before they become a major problem.

No financial institution can afford to be complacent because any organization can be the victim of a costly security breach, regardless of size. Security is too important not to be given due consideration, and the threats against the financial sector look like they will only continue to escalate.

More from Banking & Finance

2022 Industry Threat Recap: Finance and Insurance

The finance and insurance sector proved a top target for cybersecurity threats in 2022. The IBM Security X-Force Threat Intelligence Index 2023 found this sector ranked as the second most attacked, with 18.9% of X-Force incident response cases. If, as Shakespeare tells us, past is prologue, this sector will likely remain a target in 2023. Finance and insurance ranked as the most attacked sector from 2016 to 2020, with the manufacturing sector the most attacked in 2021 and 2022. What…

How to Spot a Nefarious Cryptocurrency Platform

Do you ever wonder if your cryptocurrency platform cashes in ransomware payments? Maybe not, but it might be worth investigating. Bitcoin-associated ransomware continues to plague companies, government agencies and individuals with no signs of letting up. And if your platform gets sanctioned, you may instantly lose access to all your funds. What exchanges or platforms do criminals use to cash out or launder ransomware payments? And what implications does this have for people who use exchanges legitimately? Blacklisted Exchanges and Mixers…

Kronos Malware Reemerges with Increased Functionality

The Evolution of Kronos Malware The Kronos malware is believed to have originated from the leaked source code of the Zeus malware, which was sold on the Russian underground in 2011. Kronos continued to evolve and a new variant of Kronos emerged in 2014 and was reportedly sold on the darknet for approximately $7,000. Kronos is typically used to download other malware and has historically been used by threat actors to deliver different types of malware to victims. After remaining…

Why Cybersecurity Risk Assessment Matters in the Banking Industry

When customers put money in a bank, they need to trust it will stay there. Because of the high stakes involved for the customer, such as financial loss, and how long it takes to resolve fraud and potential identity theft, customers are sensitive to the security of the bank as well as fraud prevention measures. Banks that experience high volumes of fraud are likely to lose customers and revenue. The key is to protect customers and their accounts before problems…