Utah-Based Mortgage Company Must Pay $825,000 for Failing to Protect Californians’ Personal Information
Source: California DFPI, August 13, 2026
SEBI penalizes Central Depository Services for cybersecurity lapses related to 2022 malware attack, imposes Rs 1 crore penalty
MoneyControl reports: Market regulator Securities and Exchange Board of India (SEBI) has imposed a penalty of Rs 1 crore [USD $103,683.10 at today’s rate] on Central Depository Services (India) Ltd (CDSL), holding that a series of cybersecurity failures enabled the malware attack that disrupted the depository’s operations in November 2022 and affected settlement activities across […]
Helpdesk scammers are making house calls to make their lies feel more real
The Register reports: Six people suspected of bank helpdesk fraud are in custody after Dutch cops stormed an Amsterdam residence and caught them in conversation with a potential victim. Police say the individuals were aged between 15 and 30 and operated out of a makeshift call center they had established in an Amsterdam home. Authorities […]
Two U.S. banks settle class action lawsuits
The Daily Hodl reports: A bank in the US is settling with customers affected by a cybersecurity breach that exposed sensitive personal information. According to new class action documents, Cadence Bank – a regional bank headquartered in the South – has agreed to a $5.25 million settlement over a data breach tied to vulnerabilities in the […]
Marquis data breach impacts over 74 US banks, credit unions
Gesa Credit Union was one of Marquis Software Solutions’s clients affected by a breach at Marquis, but there were many others. Bleeping Computer reports: Financial software provider Marquis Software Solutions is warning that it suffered a data breach that impacted dozens of banks and credit unions across the US. Marquis Software Solutions provides data analytics, […]
Gesa Credit Union notifies customers about incident at Marquis Software Solutions
Gesa Credit Union has posted a notice on its website: Gesa Credit Union (“Gesa”) is providing notification of a recent data security incident that occurred at Marquis Software Solutions (“Marquis”), a former digital and physical marketing and communications vendor for Gesa. This incident involved information related to some Gesa members. However, this incident did not impact […]
Bank Customer Data Hacked From a Technology Vendor for Real Estate Lenders
The New York Times reports: Some of the nation’s biggest banks were scrambling on Saturday night to assess the fallout from a large-scale hack of a vendor whose compromise could expose sensitive customer data. The vendor, SitusAMC, has been deployed by hundreds of banks and other lenders to help originate and collect money from real […]
PNC Bank faces class action lawsuit over data breach exposing 740,000 records
Top Class Actions reports: A new class action lawsuit alleges The PNC Financial Services Group failed to properly secure and safeguard personally identifiable information of its customers during a data breach earlier this year. Plaintiff Madonna Blunt claims PNC disclosed earlier this month that sensitive customer information was mistakenly provided to another client without authorization […]
North Dakota’s New InfoSec Requirements for Financial Corporations
Earlier this year, North Dakota’s Governor signed HB 1127, which imposes new obligations for financial corporations operating in North Dakota. The law will take effect on August 1, 2025. From JacksonLewis, an explainer on the new law’s requirements for a comprehensive, written information security programs: Read more of the required elements at Workplace Privacy, Data Management & […]
Banks Want SEC to Rescind Cyberattack Disclosure Requirements
PYMNTS reports: American banking groups want the Securities and Exchange Commission (SEC) to revoke its cybersecurity incident disclosure requirements. These groups, led by the American Bankers Association (ABA), wrote to the SEC last week, contending that disclosing cybersecurity incidents “directly conflicts with confidential reporting requirements intended to protect critical infrastructure and warn potential victims.” Joining the ABA were the Securities Industry […]