Fintech
Evolve Confirms Ransomware Attack as Challenges Grow
It’s been a bad month for Evolve Bank and Trustand it’s only getting worse.
Following a “cease and desist” order. released to the bank on June 14, the Arkansas-based lender on Wednesday (June 26) publicly confirmed the news that a ransomware gang had he hacked the bank and published customer data on the dark web.
“Bad actors have released illegally obtained data, including personally identifiable information (PII), onto the dark web. The data varies from individual to individual but may include name, social security number, date of birth, account information and/or other personal information,” Evolve said in a statement. declarationechoing a spokesperson’s comments shared previously with PIMNTI.
The ransomware gang behind the attack is believed to be the Russian-linked LockBit 3.0 cybercriminal group.
The criminal attack comes less than two weeks after Evolve’s risk management program came under Fed scrutiny, and the ongoing fallout from the ransomware attack is playing out as Evolve itself remains locked in the failure case with Synapseof which precisely thousands From end customer funds remain inaccessible while their sensitive data now circulates freely.
The scope of the breach and the data released could impact nearly the entire FinTech landscape beyond just users of Evolve’s Banking-as-a-Service (BaaS) program partners, which include Affirm, Stripe, Mercury, Airwallex, Alloy , Bond (now part of FIS), Branch, Dave, EarnIn, TabaPay and others, along with their customers or anyone who has sent or received a payment from them.
Affirm Wednesday evening (June 26) confirmed that its card product was affected by the Evolve hack.
This remains a developing story.
to know more: FinTech Banking Partner Evolve Bancorp Hit by Major Ransomware Attack
Ransomware is a real problem in financial services
The theft of Know Your Customer (KYC) data and purported identity credential images means the impact of the attack on Evolve could spread far beyond just the lender’s BaaS program to affect the broader financial sector, into particularly external stakeholders with demand deposit accounts (DDA) at Evolve.
Lockbit 3.0, the hacker group believed to be responsible for the Evolve data breach, is one of the most notorious criminal groups in the cybersecurity field.
Just last month (May 7), the US Department of Justice (DOJ) unsealed charges against a Russian citizen for his alleged role as creator, developer and administrator of the LockBit ransomware group “from its inception in September 2019 to the present.”
“The LockBit ransomware group has been one of the most prolific ransomware variants worldwide, causing billions of dollars in losses and devastating critical infrastructure, including schools and hospitals,” the FBI director said Christopher Wray in a statement.
As PYMNTS reported, the The FBI’s latest annual report on Internet crimepublished this spring, revealed that the financial damage to the United States is due to ransomware attacks alone increased by 74% in 2023.
“We’ve always had social engineering attacks, but with the advent of AIit’s much easier to create a bot that has a credible conversation with a victim and convinces many victims at the same time to share their credentials, transfer money, and do other things they wouldn’t normally do,” Maciej PituchaVice President of Product and Data at Mangopayhe told PYMNTS.
“Data is usually the answer. … Building an effective fraud prevention solution requires a lot of data and a lot of experience,” Pitucha added.
to know more: Implement effective cyber hygiene across your business
Future-proof the cyber risk landscape
The Evolve attack comes at the end of a month that has seen several high-profile cyber attacks. These include “significant volume of data” stolen from at least 165 customers of the multi-cloud data warehousing platform Snowflakeas well as a attack about car dealership software provider CDK.
Especially for small and medium-sized businesses (SMBs) that may have modest or non-existent cybersecurity plans, these attacks can be devastating. And typically, smaller banks, like Evolve, often don’t have the IT security budget of larger banks. This can be seen in the deficiencies found by the Federal Reserve and the Arkansas State Bank Department during their investigations into Evolve’s oversight of partnerships with FinTech companies and anti-money laundering requirements.
And the importance of BaaS best practices is becoming increasingly important in a context where, according to PYMNTS IntelligenceApproximately two-thirds of banks and credit unions have entered into at least one FinTech partnership in the past three years, with 76% of banks considering FinTech partnerships necessary to meet customer expectations.
See more in: To assert, banking, Banks, Cyber attack, Cyber security, Data breach, Department of Justice, evolve, Evolve Bank and Trust, FBI, Federal Reserve, Financial technology, News, PIMNTI news, ransomware, Safety, Synapses
Fintech
US Agencies Request Information on Bank-Fintech Dealings
Federal banking regulators have issued a statement reminding banks of the potential risks associated with third-party arrangements to provide bank deposit products and services.
The agencies support responsible innovation and banks that engage in these arrangements in a safe and fair manner and in compliance with applicable law. While these arrangements may offer benefits, supervisory experience has identified a number of safety and soundness, compliance, and consumer concerns with the management of these arrangements. The statement details potential risks and provides examples of effective risk management practices for these arrangements. Additionally, the statement reminds banks of existing legal requirements, guidance, and related resources and provides insights that the agencies have gained through their oversight. The statement does not establish new supervisory expectations.
Separately, the agencies requested additional information on a broad range of arrangements between banks and fintechs, including for deposit, payment, and lending products and services. The agencies are seeking input on the nature and implications of arrangements between banks and fintechs and effective risk management practices.
The agencies are considering whether to take additional steps to ensure that banks effectively manage the risks associated with these different types of arrangements.
SUBSCRIBE TO THE NEWSLETTER
And get exclusive articles on the stock markets
Fintech
What changes in financial regulation have impacted the development of financial technology?
Exploring the complex landscape of global financial regulation, we gather insights from leading fintech leaders, including CEOs and finance experts. From the game-changing impact of PSD2 to the significant role of GDPR in data security, explore the four key regulatory changes that have reshaped fintech development, answering the question: “What changes in financial regulation have impacted fintech development?”
- PSD2 revolutionizes access to financial technology
- GDPR Improves Fintech Data Privacy
- Regulatory Sandboxes Drive Fintech Innovation
- GDPR Impacts Fintech Data Security
PSD2 revolutionizes access to financial technology
When it comes to regulatory impact on fintech development, nothing comes close to PSD2. This EU regulation has created a new level playing field for market players of all sizes, from fintech startups to established banks. It has had a ripple effect on other markets around the world, inspiring similar regulatory frameworks and driving global innovation in fintech.
The Payment Services Directive (PSD2), the EU law in force since 2018, has revolutionized the fintech industry by requiring banks to provide third-party payment providers (TPPs) with access to payment services and customer account information via open APIs. This has democratized access to financial data, fostering the development of personalized financial instruments and seamless payment solutions. Advanced security measures such as Strong Customer Authentication (SCA) have increased consumer trust, pushing both fintech companies and traditional banks to innovate and collaborate more effectively, resulting in a dynamic and consumer-friendly financial ecosystem.
The impact of PSD2 has extended beyond the EU, inspiring similar regulations around the world. Countries such as the UK, Australia and Canada have launched their own open banking initiatives, spurred by the benefits seen in the EU. PSD2 has highlighted the benefits of open banking, also prompting US financial institutions and fintech companies to explore similar initiatives voluntarily.
This has led to a global wave of fintech innovation, with financial institutions and fintech companies offering more integrated, personalized and secure services. The EU’s leadership in open banking through PSD2 has set a global standard, promoting regulatory harmonization and fostering an interconnected and innovative global financial ecosystem.
Looking ahead, the EU’s PSD3 proposals and Financial Data Access (FIDA) regulations promise to further advance open banking. PSD3 aims to refine and build on PSD2, with a focus on improving transaction security, fraud prevention, and integration between banks and TPPs. FIDA will expand data sharing beyond payment accounts to include areas such as insurance and investments, paving the way for more comprehensive financial products and services.
These developments are set to further enhance connectivity, efficiency and innovation in financial services, cementing open banking as a key component of the global financial infrastructure.
General Manager, Technology and Product Consultant Fintech, Insurtech, Miquido
GDPR Improves Fintech Data Privacy
Privacy and data protection have been taken to another level by the General Data Protection Regulation (GDPR), forcing fintech companies to tighten their data management. In compliance with the GDPR, organizations must ensure that personal data is processed fairly, transparently, and securely.
This has led to increased innovation in fintech towards technologies such as encryption and anonymization for data protection. GDPR was described as a top priority in the data protection strategies of 92% of US-based companies surveyed by PwC.
Financial Expert, Sterlinx Global
Regulatory Sandboxes Drive Fintech Innovation
Since the UK’s Financial Conduct Authority (FCA) pioneered sandbox regulatory frameworks in 2016 to enable fintech startups to explore new products and services, similar frameworks have been introduced in other countries.
This has reduced the “crippling effect on innovation” caused by a “one size fits all” regulatory approach, which would also require machines to be built to complete regulatory compliance before any testing. Successful applications within sandboxes give regulators the confidence to move forward and address gaps in laws, regulations, or supervisory approaches. This has led to widespread adoption of new technologies and business models and helped channel private sector dynamism, while keeping consumers protected and imposing appropriate regulatory requirements.
Co-founder, UK Linkology
GDPR Impacts Fintech Data Security
A big change in financial regulations that has had a real impact on fintech is the 2018 EU General Data Protection Regulation (GDPR). I have seen how GDPR has pushed us to focus more on user privacy and data security.
GDPR means we have to handle personal data much more carefully. At Leverage, we have had to step up our game to meet these new rules. We have improved our data encryption and started doing regular security audits. It was a little tricky at first, but it has made our systems much more secure.
For example, we’ve added features that give users more control over their data, like simple consent tools and clear privacy notices. These changes have helped us comply with GDPR and made our customers feel more confident in how we handle their information.
I believe that GDPR has made fintech companies, including us at Leverage, more transparent and secure. It has helped build trust with our users, showing them that we take data protection seriously.
CEO & Co-Founder, Leverage Planning
Related Articles
Fintech
M2P Fintech About to Raise $80M
Application Programming Interface (API) Infrastructure Platform M2P Financial Technology has reached the final round to raise $80 million, at a valuation of $900 million.
Specifically, M2P Fintech, formerly known as Yap, is closing a new funding round involving new and existing investors, according to entrackr.com. The India-based company, which last raised funding two and a half years ago, previously secured $56 million in a round led by Insight Partners, earning a post-money valuation of $650 million.
A source indicated that M2P Fintech is ready to raise $80 million in this new funding round, led by a new investor. Existing backers, including Insight Partners, are also expected to participate. The new funding is expected to go toward enhancing the company’s technology infrastructure and driving growth in domestic and international markets.
What does M2P Fintech do?
M2P Fintech’s API platform enables businesses to provide branded financial services through partnerships with fintech companies while maintaining regulatory compliance. In addition to its operations in India, the company is active in Nepal, UAE, Australia, New Zealand, Philippines, Bahrain, Egypt, and many other countries.
Another source revealed that M2P Fintech’s valuation in this funding round is expected to be between USD 880 million and USD 900 million (post-money). The company has reportedly received a term sheet and the deal is expected to be publicly announced soon. The Tiger Global-backed company has acquired six companies to date, including Goals101, Syntizen, and BSG ITSOFT, to enhance its service offerings.
According to TheKredible, Beenext is the company’s largest shareholder with over 13% ownership, while the co-founders collectively own 34% of the company. Although M2P Fintech has yet to release its FY24 financials, it has reported a significant increase in operating revenue. However, this growth has also been accompanied by a substantial increase in losses.
Fintech
Scottish financial technology firm Aveni secures £11m to expand AI offering
By Gloria Methri
Today
- To come
- Aveni Assistance
- Aveni Detection
Artificial intelligence Financial Technology Aveni has announced one of the largest Series A investments in a Scottish company this year, amounting to £11 million. The investment is led by Puma Private Equity with participation from Par Equity, Lloyds Banking Group and Nationwide.
Aveni combines AI expertise with extensive financial services experience to create large language models (LLMs) and AI products designed specifically for the financial services industry. It is trusted by some of the UK’s leading financial services firms. It has seen significant business growth over the past two years through its conformity and productivity solutions, Aveni Detect and Aveni Assist.
This investment will enable Aveni to build on the success of its existing products, further consolidate its presence in the sector and introduce advanced technologies through FinLLM, a large-scale language model specifically for financial services.
FinLLM is being developed in partnership with new investors Lloyds Banking Group and Nationwide. It is a large, industry-aligned language model that aims to set the standard for transparent, responsible and ethical adoption of generative AI in UK financial services.
Following the investment, the team developing the FinLLM will be based at the Edinburgh Futures Institute, in a state-of-the-art facility.
Joseph Twigg, CEO of Aveniexplained, “The financial services industry doesn’t need AI models that can quote Shakespeare; it needs AI models that deliver transparency, trust, and most importantly, fairness. The way to achieve this is to develop small, highly tuned language models, trained on financial services data, and reviewed by financial services experts for specific financial services use cases. Generative AI is the most significant technological evolution of our generation, and we are in the early stages of adoption. This represents a significant opportunity for Aveni and our partners. The goal with FinLLM is to set a new standard for the controlled, responsible, and ethical adoption of generative AI, outperforming all other generic models in our select financial services use cases.”
Previous Article
Network International and Biz2X Sign Partnership for SME Financing
IBSi Daily News Analysis
SMBs Leverage Cloud to Gain Competitive Advantage, Study Shows
IBSi FinTech Magazine
- The Most Trusted FinTech Magazine Since 1991
- Digital monthly issue
- Over 60 pages of research, analysis, interviews, opinions and rankings
- Global coverage
subscribe now
-
DeFi6 months ago
DeFi Technologies Appoints Andrew Forson to Board of Directors
-
News7 months ago
Block Investors Need More to Assess Crypto Unit’s Earnings Potential, Analysts Say — TradingView News
-
Fintech6 months ago
US Agencies Request Information on Bank-Fintech Dealings
-
DeFi6 months ago
Switchboard Revolutionizes DeFi with New Oracle Aggregator
-
News7 months ago
Bitcoin and Technology Correlation Collapses Due to Excess Supply
-
News8 months ago
ValueZone launches new tools to maximize earnings during the ongoing crypto summer
-
DeFi6 months ago
Is Zypto Wallet a Reliable Choice for DeFi Users?
-
Fintech6 months ago
What changes in financial regulation have impacted the development of financial technology?
-
Fintech6 months ago
Scottish financial technology firm Aveni secures £11m to expand AI offering
-
Fintech6 months ago
Scottish financial technology firm Aveni raises £11m to develop custom AI model for financial services
-
Markets8 months ago
Crypto Expert Provides Analysis of Top Altcoins, Market Sees Slight Rise
-
Fintech8 months ago
The most influential women in Fintech 2024