Cyber attacks risk triggering bank runs, warns IMF

CYBER attacks are becoming so frequent, malicious and costly that they risk triggering bank runs, according to the International Monetary Fund (IMF).

The fund warned that rising cyber threats now posed “serious concerns for financial stability” and could push companies into insolvency.

It has sounded the alarm amid research showing that the number of malicious attacks has doubled since the pandemic. The IMF’S warning in its latest financial stability report comes just weeks after the Bank of England said it was conducting its own cyber stress test of the UK’S financial system, which has been targeted by criminals seeking to steal money or disrupt economic activity.

The IMF said: “Incidents in the financial sector could threaten financial and economic stability if they erode confidence in the financial system, disrupt critical services, or cause spillovers to other institutions.

“For example, a severe incident at a financial institution could undermine trust and, in extreme cases, lead to market sell-offs or runs on banks.”

It comes after the Government blamed Chinese hackers for orchestrating “malicious” cyber campaigns against MPS and the Electoral Commission.

A Bank of England survey found that 80pc of companies believe a cyber attack is now the second biggest threat to the UK financial system, just below geopolitical risk.

The IMF said the risk of significant financial losses from cyber incidents had increased dramatically.

It said: “Such losses could potentially cause funding problems for companies and even jeopardise their solvency. The size of these extreme losses has more than quadrupled since 2017 to $2.5bn (£2bn). And indirect losses like reputational damage or security upgrades are substantially higher.”

While the fund did not call out specific countries for being responsible for attacks, it noted that the number of cyber attacks had surged in the wake of Russia’s invasion of Ukraine in February 2022.

The Washington-based institution added that attacks on financial firms now accounted for nearly a fifth of all attempted hacks, with commercial banks the most exposed.