Dramatic bank heists may make for good movies, but a sneakier class of thieves are taking a “low and slow” approach to stealing financial data that allows them to go undetected for long periods of time.
According to a new report from Carnegie Mellon University’s Software Engineering Institute, malicious insiders within the financial industry typically get away with their fraud for nearly 32 months before being detected. For the report, the institute’s CERT Insider Threat Center examined 67 insider fraud cases, as well as 13 external fraud cases, that occurred between 2005 and the present.