Bank Attacks Put Password Insecurity Back in the Spotlight

### Executive Summary The article describes two October incidents against banks: a credential-stuffing breach at HSBC that resulted in unauthorized access to customer accounts and exposure of personal and account information, and a large card compromise in Pakistan where data for 19,864 cards across 22 banks was placed on the dark web; both are attributed to attackers exploiting password/knowledge-based authentication weaknesses and underscore recommendations to adopt stronger, cryptographic and multi-factor authentication methods.