artius.iD CEO warns banks on biometric data breaches

Michael Marcotte, the founder, chairman, and CEO of enterprise-grade digital authentication firm artius.iD, was warned that a successful biometric data breach at a pioneering bank could put them on the brink of the next global financial crisis.  

The intervention follows recent comments by the CEO of HSBC UK, Ian Stuart, who last month told UK policymakers the bank is “being attacked all the time” by online criminals, leading to cybersecurity becoming the bank's biggest expense, amounting to hundreds of millions of pounds (The Guardian). This highlights the imminent danger banks are currently facing and the necessity for urgent action.

Banks’ biometric data

Marcotte thinks the risk posed by banks’ biometric data is flying under the radar

But Marcotte, who co-founded the US National Cybersecurity Centre and Chaired its Rapid Response Centre, thinks the risk posed by banks’ biometric data is flying under the radar. Banks are currently storing this data in a centralised way, providing a single avenue through which hackers can expose vast volumes of highly sensitive data. 

He argued that a large-scale breach of this data could lead to group litigation from customers on a scale large enough to destabilise a bank and the wider financial ecosystem – and urged banks to decentralise this data by pushing it onto customers’ devices. 

AI-driven threat detection

Michael Marcotte, founder, chairman, and CEO of artius.iD, said: “Banks are spending hundreds of millions to bolster their cyber defences – everything from zero trust architecture to AI-driven threat detection, and even quantum-resistant cryptography. But sometimes it’s far better, and vastly cheaper, to remove the need for protection in the first place." 

“The reams of biometric data banks are storing right now on centralised systems is a big red bullseye for hackers. It offers a single vector through which one successful attack could deal catastrophic damage. This is the biggest cyber threat banks face today – and yet bank executives and their regulators are largely blind to it."

Biometric data and financial security

Marcotte added: “The operational and reputational costs to a bank of a large-scale biometric data hack would be enormous – but this would be nothing compared to the cost of the group litigation they could be hit with by the customers whose fingerprints and facial and vocal data are breached. If this were to happen at a JPMorgan or an HSBC, it would bring them to their knees, and the fallout for our entire global banking system could be apocalyptic." 

“And yet the solution is simple. All that’s needed to de-risk this data is to decentralise its storage – pushing it onto customers’ own devices where it belongs. The technology is available to do this – and we need to see the banking industry catch up, and stop putting our biometric data and our financial security at risk.”