Can AI Take Down a Bank? Bank of England Warns of Rising Cyber Risks
A sophisticated cyberattack on a major bank could trigger consequences far beyond stolen customer data. Disrupted payment systems, inaccessible accounts and compromised financial infrastructure could threaten the stability of essential banking services.
On October 15, 2026, Reuters reported that the Bank of England was urging financial institutions to prepare for increasingly sophisticated cyber threats, including attacks enabled by artificial intelligence (AI). Deputy Governor Sarah Breeden emphasized the importance of maintaining recovery systems that can operate independently if a bank’s primary technology infrastructure is compromised. The central bank is also examining the potential long-term threat quantum computing could pose to encryption technologies used across financial services.
These developments highlight the growing importance of digital forensics in the banking sector. Following a cyber incident, investigators must establish how the attack occurred, identify the systems and accounts affected, and reconstruct the sequence of events using digital evidence. This may involve examining system logs, network traffic, access records, malware traces and suspicious financial transactions.
Investigators must also determine whether confidential information was accessed, transferred or altered, and whether compromised systems were used to initiate unauthorized payments. Maintaining the integrity of digital evidence is critical, particularly when findings may support regulatory action, criminal proceedings or internal investigations.
Meanwhile, independent recovery infrastructure can help banks restore essential services even when their primary systems remain compromised. However, restoring operations alone does not establish the full extent or cause of an attack.
As AI reshapes the cyber threat landscape, financial institutions face a dual challenge: keeping services operational while preserving reliable evidence to understand and investigate incidents.