The boss of one of many UK’s greatest banks has stated the specter of cyber assaults “retains me awake at evening”.
Ian Stuart, the CEO of HSBC UK, stated cyber safety was “prime of the agenda” for his banking group, and coping with IT vulnerabilities was an “huge” expense for the sector as an entire.
He stated: “It does fear me – we might be attacked and we’re being attacked on a regular basis.”
Mr Stuart and different financial institution bosses have been chatting with the Commons Treasury Committee which has been taking proof on a spread of points affecting the business, together with how susceptible it’s to outages and cyber assaults.
In March, it emerged nine major banks and building societies operating in the UK accumulated at least 803 hours – the equal of 33 days – of tech outages previously two years.
In current weeks, retailers Co-op and Marks and Spencer have skilled extreme disruption after being focused by hackers.
Lisa Forte, of the cyber safety firm Crimson Goat, instructed BBC Information that Mr Stuart had made “an extremely necessary level”.
“Cyber assaults are rising in each quantity and severity,” she stated.
“Criminals are monetising assaults extra effectively and we’re at a degree now the place it very a lot is when not if companies will expertise an assault.”
Mr Stuart stated his banking group was spending tons of of thousands and thousands of kilos bettering its IT techniques.
“I believe the sum of money banks – all of us – will probably be placing into our techniques is gigantic,” he stated.
“The defence mechanisms you place in are completely essential.”
Throughout his group, he stated they’re processing 1000 funds a second whereas making 8000 IT adjustments and updates each week.
Prof Oli Buckley, a cyber safety skilled at Loughborough College, stated cyber assaults on monetary establishments have been “relentless” and “more and more refined”.
“Ian Stuart is certainly proper to spotlight cyber safety as a serious concern for the banking sector, however current occasions inside retail have been a stark reminder that it could impression each sector,” he added.
“It goes past simply defending buyer knowledge, it is about sustaining belief in the complete monetary system. A breach does not simply threat particular person accounts; it could ripple by markets, reputations, public confidence and past.”
Barclays, Lloyds, Nationwide, Santander, NatWest, Danske Financial institution, Financial institution of Eire and Allied Irish Financial institution have additionally offered info to the committee.
Between January 2023 and February this 12 months, they skilled 158 IT failures between them.
Vim Maru, CEO of Barclays, addressed MPS concerning the Barclays outage which occurred on what was January pay day for many individuals.
Severe IT issues affected on-line banking for a number of days, left some individuals unable to maneuver dwelling – and will end result within the financial institution dealing with compensation funds of £12.5m, a report has found.
Mr Maru apologised to clients, saying he was “deeply sorry for the disruption”. He stated there was no proof it was brought about a cyber incident or a malicious act.
Following the Barclays incident in January, about 1.2m individuals within the UK have been then affected by additional banking outages in February.
These issues occurred at Lloyds, TSB, Nationwide and HSBC.