Mercury's customer data breach was soooo damaging.
For those unaware, there was a breach at mercury that gave attackers the following information (from their site):
- Business and Beneficial Owner Information:
- Name(s)
- Phone numbers
- Addresses
- Email addresses
- Account Details:
- Overall account balance
- Business bank account numbers
- Business EIN
- Transaction Information:
- Entities you transact with
- Sender and receiver’s address
- Account number
- Transaction amounts
Despite all that, a web search does not reveal a post-mortem by Mercury. I don't know why you'd trust them.
My bank has for nearly 3 decades an implementation of an standartised api banking API called FINTS. There are quite a few clients for that use the api, including the app of my bank on my phone.
Ultimately the money is stored in actual banks. We're stuck with "fintechs" because banks seemingly can't/won't modernize and the government won't allow new banks to be created.
At least I know that bunq, an European „NeoBank“, applied for an FDIC license in the US and received one. It’s offers a lot of cool features and an API.
For those unaware, there was a breach at mercury that gave attackers the following information (from their site):
Despite all that, a web search does not reveal a post-mortem by Mercury. I don't know why you'd trust them.reply