Compliance

Roughly 680 customers were affected, none in the U.S. But the control that failed at Revolut is the legal intake queue every American bank runs.

Seven of eight offices are open; debit cards are capped at $1,000 a day; and the bank's website is down. The bank has given no restoration date.

Regulators want firms to spot where several critical functions ride on one provider, a question the department's earlier vendor guidance did not ask.

Researchers showed a message with no return address slips past Reject Direct Send. Credit unions were told to close this kind of gap in 2021.

IDScan.net removed the pages naming its bank and credit union integrations after KrebsOnSecurity traced 153 million license scans to the company.

The bank's strategy for getting from experimentation to measurable ROI is a model others should consider.

The core provider says ShinyHunters' breach affected fewer than 10 financial institution clients.

Financial institutions were among 300-plus U.S. organizations robbed in a 2024 campaign.

Attackers are adding small banks and credit unions to their target lists, and a valid login is no longer proof the customer authorized the transfer.