Forgot your password?
typodupeerror
Crime Security The Almighty Buck The Courts IT Your Rights Online

US Appeals Court Says Bank Liable For Losses From Poor Online Security 94

Posted by timothy
from the perhaps-should-apply-to-more-than-banks dept.
An anonymous reader writes with this extract: "Threatpost reports that a judge on the United States Court of Appeals this week ruled that People's United Bank's processes and systems for protecting customer accounts from fraud were not "commercially reasonable." The ruling in People's United Bank (formerly Ocean Bank of Maine) versus Patco Construction Company reverses a lower court's ruling in a case that stems from six allegedly fraudulent transactions that occurred over the period of a week in May, 2009 and drained close to $589,000 dollars from Patco's accounts. Patco alleged that People's United Bank did an inadequate job of protecting them against fraud, ignoring repeated 'high risk' warnings from the bank's fraud detection system. Now the Appeals Court appears to agree. The ruling could have broad implications in the U.S., where businesses that are the victim of account takeovers and fraudulent transactions are suing banks to recover lost funds."
This discussion has been archived. No new comments can be posted.

US Appeals Court Says Bank Liable For Losses From Poor Online Security

Comments Filter:
  • by DogDude (805747) on Saturday July 07, 2012 @09:29AM (#40575125) Homepage
    It's about fucking time. Banks (and yes, even credit unions) have been warning its customers that whatever happens through their online interfaces isn't their fault. That's really just absurd, when a person or company's entire financial life is available via a single password on the Net. Security, of course, isn't the sole responsibility of the banks, but it is their responsibility. Banks provide giant safes for our physical valuables, they provide insurance for theft or collapse, but online, it's "good luck, customers!"? Bullshit. It's time to hold them at least somewhat responsible for their online interfaces, as well.
  • by drinkypoo (153816) <martin.espinoza@gmail.com> on Saturday July 07, 2012 @09:41AM (#40575169) Homepage Journal

    It's well past time. My bank is retarded. Mandatory security questions that people can find out answers to by research, you can lie to them but then you have to remember your lies. Also, your initial online access PIN is the last four of your SSN, and it persists from the time you go to the bank to get it activated to the first login, which could be a very short time (it was for me) or a very long time but either way is terrible.

  • by The Mighty Buzzard (878441) on Saturday July 07, 2012 @11:02AM (#40575573)
    I honestly don't see how this is a problem. A bank's fundamental commitment is to be a safe place to stuff your money. They pay a pretty fair chunk of money to physical security experts to make sure nobody can walk in and take the money in their charge. They should take their online security just as seriously and if they don't they should be held liable.
  • by way2trivial (601132) on Saturday July 07, 2012 @12:05PM (#40575895) Homepage Journal

    back in the 80's I was asked for my mothers maiden name-

    I asked why they needed it- and they said for a password in case I ever called
    - i immediately thought -- my brother knows the answer to that- and he's the only person I can see attempting it

    My mothers maiden name has been snotrag ever since (not snotrag, but something equally offcolor) and it's always been the same answer

    the one my brother does not know.

  • by Anonymous Coward on Saturday July 07, 2012 @12:05PM (#40575897)
    False dichotomy - the choice isn't usually between 'lawyer security' and 'real security'. The bank is often choosing between 'lawyer security' and 'no security'.

"Catch a wave and you're sitting on top of the world." - The Beach Boys

Working...