Gareth Bowker
Jscrambler, Head of Security Research
Live on August 20th, 2026 • 10am ET | 3pm UK
The Crack in the Vault: How Banking Sites Unknowingly Expose Customer Data to Third Parties
Banks are trusted to protect our most private financial details, but new security research reveals a major gap between that promise and digital reality. Jscrambler's analysis of financial institutions across the US and Europe reveals a critical vulnerability: sensitive customer and commercial data—such as loan amounts, account details, and hashed emails—is routinely leaked to third-party ad platforms.
Worse, these third-party browser scripts bypass traditional security perimeters and ignore privacy choices, capturing data before consent or even after a user selects "reject all."
In this webinar, we will analyze data exposure cases documented across 14 US and European financial sites. We will explain how scripts bypass cookie consent, map the paths sensitive data takes, and discuss the steps you should take to implement runtime controls to secure these flows.
Key Takeaways
Consent Failures
How tracking scripts run before banner interaction or ignore explicit "reject all" commands.
Financial Intent Leaks
How credit simulations quietly send exact loan amounts and terms to external ad networks.
Identity Exposure
The mechanics of how hashed emails, names, and tax IDs slip through default ad-tech matching.
Active Defense
How to deploy continuous client-side monitoring to block unauthorized exfiltration in real time.
Join Jscrambler's security research team as we break down these findings and show you how to regain control of your client-side data.
Related Resources
Financial Services
Research Deep Dive: Commercial Data Collection by TikTok and Meta Pixels