BOSTON, March 17, 2021 /PRNewswire/ — Cybersecurity vulnerabilities among credit unions and their vendors create the potential for large financial impacts to the credit union industry, according to the 2021 Third-Party Risk Pulse: Credit Unions and Vendor Ecosystems report released by Black Kite today.
The research analyzed the cybersecurity posture of 250 NCUA credit unions and 150 vendors commonly used by credit unions. Both credit unions and their vendors averaged a Black Kite cyber grade of “B,” which indicates cyber breaches would require the skills of persistent, highly experienced hackers.
However, most credit unions and vendors experienced leaked employee credentials, employed poor software patch management practices, and used insecure email networks. These vulnerabilities create the opportunity for significant financial impacts if credit unions are attacked directly or via a third-party that has access to credit union networks.
Direct attacks to credit unions estimate an annual financial risk ranging from $190,000 for small credit unions to more than $1.2 million for large credit unions. Potential third-party attacks through credit union vendors pose a higher…
