The Growing Threat of Identity Security in Finance: Insights from HYPR’s Latest Report

In an era where digital transactions dominate, the financial sector faces unprecedented challenges in safeguarding customer identities. On October 10, 2024, HYPR, the Identity Assurance Company, unveiled its spotlight report titled "When Trust is Hacked: Customer Identity Security in Finance." This comprehensive analysis highlights the alarming rise of credential misuse and authentication vulnerabilities that plague the financial industry, revealing a direct link between escalating cyber threats and the increasing anxiety among banking customers.

The Alarming Statistics

HYPR’s report is grounded in insights from two extensive surveys involving 548 respondents, including both financial service organizations and their customers. The findings paint a stark picture of the current state of identity security in finance:

• Prevalence of Cyberattacks: A staggering 86% of financial organizations reported being targeted by identity-related cyberattacks in the past year, with 84% falling victim to identity fraud.
• Financial Losses: Institutions suffered losses averaging $4.57 million in the last year, more than double the $2.19 million reported in 2022, primarily due to insecure authentication methods.
• Types of Attacks: Over three-quarters (77%) of organizations experienced at least one breach due to credential misuse or authentication weaknesses. Phishing attacks were the most common, accounting for 42% of incidents, followed by credential stuffing (29%), identity impersonation (28%), and push notification attacks (27%).

The Impact on Customer Trust

The ramifications of these security breaches extend beyond financial losses; they significantly impact customer loyalty. The report reveals that a staggering 80% of respondents would likely abandon their financial institution following a data breach. This trend is particularly pronounced among younger customers, with 93% of those under 35 expressing readiness to close their accounts after a breach. In contrast, more than a quarter of customers aged 45 and older indicated they would remain loyal despite security lapses.

This shift in customer priorities underscores a growing demand for accountability, transparency, and robust security measures from financial institutions. As Gehan Dabare, a newly appointed HYPR Advisor, aptly states, "Gone are the days of blind trust. Today’s consumers are informed and empowered, demanding transparency, cutting-edge technology, and the peace of mind that comes with knowing their finances are secure."

The Communication Gap

Despite the evident demand for improved security measures, the report highlights a critical gap in communication between financial institutions and their customers. A mere 11% of respondents were aware of breaches affecting their banks, while 63% believed their banks were unscathed. This lack of awareness raises concerns about the effectiveness of disclosures during breaches and emphasizes the need for financial institutions to enhance their communication strategies.

The Demand for Modern Authentication

As customers become increasingly aware of security technologies, the demand for modern authentication methods is on the rise. The report indicates that 95.5% of respondents are aware of passkeys as a login technology, and 77% would actively favor a bank offering passkeys over one that does not. However, despite this growing awareness, financial institutions are lagging in their adoption of safer authentication methods. Nearly a quarter (22%) of respondents still reuse passwords across financial accounts, while close to 90% rely on one-time passwords (SMS, email, or voice).

The Paradox of Investment in Cybersecurity

Bojan Simic, CEO and Co-founder of HYPR, highlights a paradox within the financial sector: despite significant investments in cybersecurity, institutions remain prime targets for cybercriminals. "The question isn’t how these attacks happen, but why they persist," he states. The report reveals a dual challenge: the struggle to implement effective technology amidst rapidly evolving AI-driven threats and the rising tide of customer expectations for robust security and transparent communication.

Conclusion: A Call to Action

HYPR’s report serves as a wake-up call for the financial sector. As cyber threats continue to evolve, institutions must proactively adapt their defenses to maintain customer trust and mitigate financial losses. The findings underscore the urgent need for modernization in authentication practices and improved communication strategies to address customer concerns.

In a landscape where trust is paramount, financial institutions must recognize that inaction is not an option. The time to act is now, as the stakes have never been higher for both organizations and their customers. As the financial sector navigates this complex landscape, the emphasis on identity security will be crucial in ensuring a secure and trustworthy banking experience for all.

About HYPR

HYPR is a leader in passwordless identity assurance, providing comprehensive end-to-end identity security solutions for organizations worldwide. By unifying phishing-resistant passwordless authentication, adaptive risk mitigation, and automated identity verification, HYPR ensures secure and seamless user experiences. Trusted by major financial institutions and critical infrastructure companies, HYPR is at the forefront of securing complex environments globally.

For media inquiries, please contact:
Fabienne Dawson
Email: fabienne@hypr.com
Phone: 917.374.6860

In a world where trust is continually tested, the financial sector must rise to the occasion, embracing innovation and transparency to protect the identities of their customers.