Banks must tell regulators of a serious breach within 36 hours under a codified rule. Regulators say they will tell banks 72 hours of their own data breaches, in a memo nobody can enforce.

The customer-sourced investment will continue to support the digital banking provider's AI and digital loan origination initiatives.

Feeding vulnerabilities into Gold Eagle could expose a bank to regulators or lawsuits, a cybersecurity lawyer warns.

The deal is the latest in a series of acquisitions by bank core provider CSI, which is further expanding its offerings for regional and community banks.