Data breaches

A security researcher found a database exposing names, addresses, and bills apparently belonging to Willow Pay, a fintech for short-term financing on bills.

2024 brought important issues front and center for bankers, ranging from the rise of artificial intelligence to the fall of banking-as-a-service.

The breach, which occurred earlier in November, did not directly impact customer operations, but a threat actor stole data meant for customers.

The four lawsuits allege that attackers stole members' Social Security numbers, among other data. Patelco has not yet confirmed whether any data was stolen.

Wise, Affirm and Bilt Rewards are among the seven fintechs whose customers' data has gotten tied up in the breach. The number of affected companies is likely to grow.

In this month's roundup of top banking news: a cease-and-desist issued by the Federal Reserve, high CFO turnover, the end of Chevron deference and more.

The threat actor Sp1d3r posted an ad for the stolen data on Wednesday. Truist said the October breach is not related to a campaign by the same criminal group.

Financial Business and Consumer Solutions disclosed a February breach in April and recently disclosed an expanded victim count. The company faces a class action lawsuit.

The attack is one of three major incidents the lender has suffered in the past three years.

Bank of America, Citi and Navy Federal are among banks and credit unions to recently manage through unforeseen challenges.