The financial services industry is a high value target for threat actors. Firms in this sector are 300 times more likely to be targeted by a cyberattack and over 50% of these companies are at heightened risk of becoming a victim of ransomware.
The National Credit Union Administration announced the mandate in a proposed rule that cites the financial industry's vulnerability to ransomware and other cyberattacks. The proposed rule would require federally charted credit unions to report within 72 hours any incident that leads to the "substantial loss" of confidentiality, integrity or availability of member information.