TLDR Tech / InfoSec
EU Financial Institutions Leak Data Through Cookie Trackers
Jscrambler found European and US banks sending customer data via tracking pixels to platforms like Google, Meta, TikTok, and Salesforce, sometimes before or against user cookie consent. Examples include hashed emails and phone numbers from a Spanish mortgage flow and unencrypted names, tax IDs, and loan details from Portuguese sites. The work highlights concrete GDPR, ePrivacy, DORA, and PSD2 exposure and calls for tighter runtime controls and consent enforcement on banking pages.
Read the full story