Bank of America fined $1.2 billion for AML failures amid AI vulnerability fixes
The lender faces a major regulatory penalty for compliance gaps while spending hundreds of millions to patch flaws found by Anthropic’s AI model.
Key points
- Bank of America was fined $1.2 billion for money laundering offenses this week.
- CEO Brian Moynihan stated the bank spent hundreds of millions on AML remediation.
- The bank hired 1,000 consultants to fix vulnerabilities discovered by Claude Mythos Preview.
Bank of America was fined $1.2 billion this week for money laundering offenses, according to CSO Online. Banking authorities cited a lax attitude toward compliance as the primary reason for the penalty. The financial institution is simultaneously addressing significant security gaps identified by artificial intelligence tools.
CEO Brian Moynihan discussed the financial impact during a conference call on third-quarter results. He stated that the bank invested billions in technology to combat financial crime. Moynihan added that several hundred million dollars in the third quarter were dedicated to anti-money-laundering remediation efforts.
Compliance and Security Costs
The bank’s IT team spent a similar amount on fixing software vulnerabilities, Moynihan said. This technical remediation required hiring 1,000 consultants to join internal staff. The security flaws were revealed after the bank received an early release of Claude Mythos Preview. This AI model is designed to identify high-severity vulnerabilities in complex systems.
Anthropic reported to the US House Financial Services Committee that Claude Mythos Preview found thousands of high-severity vulnerabilities. The report noted that these flaws included issues in every major operating system and web browser. The findings prompted a large-scale patching effort across the bank’s infrastructure.
Operational Response
Bank of America deployed a massive workforce to address the technical debt. As Threat Times reported on 2026-10-15, the bank hired 1,000 contractors to join 3,000 internal workers. This team focused on fixing vulnerabilities found by models like Anthropic’s Mythos. The scale of the response highlights the depth of the security challenges.
The dual pressure of regulatory fines and security patching has strained resources. Moynihan emphasized the seriousness of compliance during the earnings call. He acknowledged that the bank is responsible for getting compliance right. The significant financial outlay reflects the urgency of the situation.
What should you do?
Organizations should review their current compliance frameworks for gaps. Security teams must assess how AI tools can help identify vulnerabilities. Monitoring regulatory announcements is crucial for understanding new penalties. Companies should prepare for increased spending on remediation.
What to do and how to stay safe: Bank of America
- Audit your anti-money-laundering controls to ensure they meet current regulatory standards.
- Evaluate how AI security tools can be integrated into your vulnerability management process.
- Monitor official channels for updates on fines and compliance requirements from banking authorities.
- Review your staffing plans to ensure you have capacity for large-scale remediation efforts.
Step-by-step guide: Risk-Based Vulnerability Management: Prioritize Fixes by Actual Danger
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How much was Bank of America fined?
The bank was fined $1.2 billion for money laundering offenses this week.
What AI tool found the vulnerabilities?
The security vulnerabilities were revealed after the bank received an early release of Claude Mythos Preview.
How many consultants were hired for the fix?
The IT team hired 1,000 consultants to help fix software vulnerabilities in its systems.
