M&T Bank Corporation Bank Account Or Service Complaint

M&T Bank Corporation Bank account or service department,

Checking account Account opening, closing, or management Maryland

M & T Bank has repeatedly refused to modernize their online banking security. This leaves their consumer vulnerable to breaches that could occur even if the customer themselves is very careful with their security. In particular their site violates the latest FFIEC Guidance on cybersecurity found here : -.pdf In particular, as laid out in the Information Security Booklet the FFIEC provides - They are in violation of procedure # - on page - : Confidentiality of passwords and shared secrets ( whether only known to the employee/customer ). The shared secrets they use are commonly found on social media sites, these questions ( mother 's maiden name, city of birth, school mascot etc, ) are widely known. M & T Bank also violates procedure # - Determine whether all authenticators ( e.g., passwords, shared secrets ) are protected while in storage and during transmission to prevent disclosure. M & T Bank allows internet browsers to store password and user information, and does not have password entry on a separate page. They do not offer - factor authentication, nor do they have image verification.