Financial institutions are seeing a surge in attacks that could put any of them at risk for a security breach. According to USA TODAY, an FBI official recently reported more than 500 million records have been stolen from financial institutions over the past 12 months as a result of cyberattacks. According to lawmakers, the financial sector in the United States is one of the most targeted in the world, resulting in hefty costs and liabilities for organizations and customers exposed to identity theft and fraud.

The increased targeting of financial institutions is echoed in research from PricewaterhouseCoopers, which found that 45 percent of financial institutions have suffered from economic crime in the past year, compared to 34 percent across all other industries. It found that the top threats to the financial sector are asset misappropriation (67 percent), followed by cybercrime (39 percent), though it is becoming increasingly common.

Top Targets

Over the past few years, large U.S. banks have been subjected to a barrage of cyberattacks, which have been extremely costly. According to reports, Citigroup, Bank of America and Wells Fargo showed a 0.4 percent to 0.9 percent drop in their stock prices as a result of attacks, while JPMorgan Chase saw its share price fall by 1 percent after a security breach.

In the JPMorgan Chase breach, names, addresses, phone numbers, email addresses and internal information related to 83 million customers were stolen by attackers. The company reported it had not seen any fraud related to the incident, though the attack — in which cybercriminals were able to gain a high level of system privileges on more than 90 servers — went unnoticed for some two months.

Already spending $250 million per year on digital security, JPMorgan Chase has pledged to double that spending over the next year as a direct result of the security breach and has increased the number of security professionals it employs to 1,000. It has also reviewed its security procedures, including access controls, to strictly limit privileged user access in order to avoid “catastrophic technical or reputational damage.” USA TODAY reports that Bank of America is also spending hundreds of millions of dollars on security, and that amount continues to grow.

The Cost of a Security Breach

A recent report by the New York State Department of Financial Services found the deployment of additional security measures was only the third most costly impact of cybersecurity breaches. The top factors included in calculating monetary loss are customer reimbursements and audit and consulting services. Some institutions factored in customer business and brand or reputational damage, though they are considered difficult to quantify. Compliance Week also reported that JPMorgan Chase is facing a probe by the attorneys general of 19 states, which could be quite costly.

Attacks such as these show that even though large financial institutions spend vast amounts of money on information security, there can still be gaps. All organizations should take and maintain inventories of all their assets on the network and should assess the risks that different classes of assets face. They should also ensure employees are adequately trained in security awareness since they are on the front line and can be helpful in spotting potential vulnerabilities before they become a major problem.

No financial institution can afford to be complacent because any organization can be the victim of a costly security breach, regardless of size. Security is too important not to be given due consideration, and the threats against the financial sector look like they will only continue to escalate.

More from Banking & Finance

Cost of a Data Breach: Banking and Finance

The importance of cybersecurity has touched almost every industry. Beyond that, robust cybersecurity is table stakes for several sectors, particularly health care and the banking and finance industry. Not only is financial data at risk, but so is customer trust. In banking and finance, trust means everything. Yet, consumers are hesitant to share their confidential data. A recent McKinsey survey revealed that no industry achieved a trust rating of 50% for data protection. Here’s the most sobering stat: 87% of…

What Do Financial Institutions Need to Know About the SEC’s Proposed Cybersecurity Rules?

On March 9, the U.S. Securities and Exchange Commission (SEC) announced a new set of proposed rules for cybersecurity risk management, strategy and incident disclosure for public companies. One intent of the rule changes is to provide “consistent, comparable and decision-useful” information to investors. Not yet adopted, these new rules – published in the Federal Register on March 23 – could change reporting requirements. Take a look at some of the big-ticket items and what your organization needs to know.…

SEC Proposes New Cybersecurity Rules for Financial Services

Proposed new policies from the Securities and Exchange Commission (SEC) could spell changes for how financial services firms handle cybersecurity. On Feb. 9, the SEC voted to propose cybersecurity risk management policies for registered investment advisers, registered investment companies and business development companies (funds). Next, the proposal will go through a public comment period until May 9.  The Importance of Cybersecurity in Finance The 2021 X-Force Threat Index found that financial services were the most targeted industry. Manufacturing beat out…

Top Security Concerns When Accepting Crypto Payment

From Microsoft to AT&T to Home Depot, more companies are accepting cryptocurrency as a way to pay for products and services. This makes perfect sense as crypto coins are a viable revenue source. Perhaps the time is ripe for businesses to learn how to receive, process and convert crypto payments into fiat currency. Still, many questions remain. How can you safely enable customers to pay with Bitcoin or other digital currency? What are the security risks that come with cryptocurrency? Let’s…