Feeds

Eurogeddon? Pah. UK banks are more terrified of hackers - big banker

Threadneedle Street ignores collapsing currency, stares fearfully at monitors

Choosing a cloud hosting partner with confidence

Hacking attacks present a bigger risk to the operation of UK banks than problems caused by the ongoing eurozone crisis, according to a senior Bank of England director.

Andrew Haldane, the BoE's director of financial stability, told parliament's Treasury Select Committee that representatives of Britain's top banks are telling him that cyber attacks have become their biggest threat over recent months.

Banks have focused on credit, market and liquidity risk over the past five years because of upheavals caused first by the sub-prime mortgage crisis and banking bailouts of 2008. These were followed by the ongoing eurozone crisis (whose latest casualty appears to be Greece's equivalent of the BBC) and a general recession across the EU.

This focus may have distracted attention away from operational risks such as cyber security, which are coming more to the fore of late, according to Haldane.

The ATM cash-out scam, which cost two Middle Eastern banks $45 million last year, happened after hackers broke into a database of prepaid debit cards. The details of the scam sent shivers across the financial industry.

There's also concerns that high-volume DDoS attacks of the type that interrupted the operations of US banks last year might easily be deployed against banks in Britain to similar effect.

"You can see why the financial sector would be a particularly good target for someone wanting to wreak havoc through the cyber route," Haldane said, according to Reuters.

"Understanding and management of this risk was still at a somewhat early stage," he added.

David Gibson, vice president at data governance software specialist Varonis, said that cyber-criminals are after any customer data they can extract from financial services institutions, in order to monetise their frauds. He added that issues around information security extend well beyond the financial services sector.

“All businesses – and not just banks – have a role to play in eradicating their bad digital habits and taking more control of their security by implementing basic security best practices: such as ensuring that staff only have access to the data they need, that all access to all data is monitored, and abuse is investigated,” Gibson said. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
Why CIOs should rethink endpoint data protection in the age of mobility
Assessing trends in data protection, specifically with respect to mobile devices, BYOD, and remote employees.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.