FICO: theft of debit card data from bank ATMs is up 174% YoY, up 317% at nonbank machines
Robin Sidel / Wall Street Journal :
Context & Ripple Effects
FICO's numbers land three months after a report of nearly 1B data records compromised worldwide in 2014 — this is that breach wave showing up as cash-machine losses. The split matters: theft at nonbank machines is growing roughly twice as fast as at bank-owned ATMs, pointing attackers toward the least-monitored endpoints of the card network.
First-order effects
- Cardholders and issuing banks absorb immediate fraudulent-debit losses, with nonbank machine operators facing the steepest exposure at 317% YoY growth in compromised card data.
Second-order effects
- Bank ATM operators gain a security-marketing edge over independent machine owners unless nonbank operators match their anti-skimming controls, pressuring the whole installed base toward chip-card readers.
Third-order effects
- The pattern — attackers migrating to whichever terminal class lags on protection — has since reappeared as scammers exploiting crypto ATMs for fraud, with FBI-tracked losses climbing from $120M+ in 2023 to $333.5M via bitcoin ATMs by late 2025.
The trend: Cash-dispensing terminals keep migrating down the protection curve — from bank ATMs to nonbank machines to crypto ATMs — making unregulated machine networks the recurring weak point of card-based payments.