Snapshot from Aug 08, 2026 at 07:00 UTC. For live data and tracking: View Live
Events / Regulatory / Jscrambler reveals bank data sharing
Regulatory research report

Jscrambler reveals bank data sharing

Analysis based on 7 articles · First reported Jul 22, 2026 · Last updated Jul 22, 2026

Sentiment
-30
Attention
3
Articles
7
Market Impact
General
Live prominence charts, article sentiment distribution, and event development timeline available on the Ergen Dashboard
Market Impact

The report may increase regulatory scrutiny and potential fines for banks, impacting their compliance costs and reputation. Ad-tech platforms could face stricter data handling requirements, affecting their advertising revenue models.

Banking Financial Services Technology
Event Summary

Jscrambler published research on July 22, 2026, revealing that 14 financial institutions in Europe and the US transmit sensitive customer data to third-party platforms like Alphabet Inc., Meta, ByteDance — TikTok Shop, LinkedIn, Pinterest, Adobe, and Salesforce without valid consent. The data includes hashed emails, phone numbers, tax IDs, and loan details. Consent failures were documented, including tracking before consent and after rejection. The findings raise compliance concerns under GDPR, EPrivacy Directive, DORA, and US privacy laws. Jscrambler recommends continuous runtime monitoring and enforcement controls.

Key Actions
100 Jscrambler published research
85 Jscrambler found tracking
70 Jscrambler documented consent failures
Entities Involved
priv
Jscrambler
Jscrambler published the research, enhancing its reputation as a client-side security platform and potentially driving demand for its services.
Importance 100.0 Sentiment 50.0
stock
Alphabet Inc.
Alphabet Inc. Analytics was found receiving loan details from Portuguese banks, raising privacy concerns and potential regulatory action.
Importance 80.0 Sentiment -30.0
stock
Meta Platforms
Meta's platforms were among the third parties receiving data without valid consent, potentially facing compliance issues.
Importance 80.0 Sentiment -30.0
subs
ByteDance — TikTok Shop
ByteDance — TikTok Shop received hashed email and phone number from a Spanish bank's mortgage process without appearing in the bank's privacy policy, highlighting data sharing risks.
Importance 70.0 Sentiment -40.0
stock
Salesforce
Salesforce received customer email, name, age, and tax number from a Portuguese bank without valid consent.
Importance 70.0 Sentiment -30.0
alliance
European Union
The findings raise compliance considerations under EU regulations like GDPR, EPrivacy Directive, and DORA, potentially leading to enforcement actions.
Importance 60.0 Sentiment 0.0
priv
LinkedIn
LinkedIn logged a user's 'reject all' click as a tracking event, indicating consent failures.
Importance 60.0 Sentiment -20.0
cnt
United States
US privacy laws such as GLBA, CCPA, and CPRA are implicated, potentially prompting regulatory scrutiny.
Importance 50.0 Sentiment 0.0
stock
Adobe Inc.
Adobe was listed as a recipient of data, but no specific incidents were highlighted.
Importance 50.0 Sentiment -10.0
stock
Pinterest
Pinterest was listed among third parties receiving data, but specific incidents were not detailed.
Importance 40.0 Sentiment -10.0
loc
Portugal
Portuguese banks were specifically cited for data sharing incidents, potentially affecting their reputation and regulatory standing.
Importance 40.0 Sentiment -10.0
oth
EPrivacy Directive
The EPrivacy Directive's prior-consent requirements are implicated by the consent failures.
Importance 40.0 Sentiment 0.0
cnt
Spain
A Spanish bank was mentioned for sending data to ByteDance — TikTok Shop, highlighting compliance gaps.
Importance 30.0 Sentiment -10.0
per
Gareth Bowker
Gareth Bowker, Head of Security Research at Jscrambler, commented on the findings, emphasizing the pattern of data exposure.
Importance 30.0 Sentiment 0.0
oth
Gramm–Leach–Bliley Act
GLBA is a US law that may be implicated by the data sharing, with potential regulatory consequences.
Importance 30.0 Sentiment 0.0
+ 1 more entities View on Dashboard
Relationships
Alphabet Inc. AI infrastructure supplier ↔ Meta Platforms Alphabet supplies Meta with its Tensor Processing Units (TPUs) and cloud computing infrastructure through a multi-billio
Alphabet Inc. related ↔ ByteDance — TikTok Shop
Alphabet Inc. related ↔ Salesforce
Alphabet Inc. related ↔ European Union
Alphabet Inc. related ↔ LinkedIn
Alphabet Inc. related ↔ United States
Alphabet Inc. related ↔ Adobe Inc.
Alphabet Inc. related ↔ Pinterest
Meta Platforms related ↔ ByteDance — TikTok Shop
Meta Platforms related ↔ Salesforce
Meta Platforms related ↔ European Union
Meta Platforms related ↔ LinkedIn
Meta Platforms related ↔ United States
Meta Platforms related ↔ Adobe Inc.
Meta Platforms related ↔ Pinterest
+ 9 more relationships View on Dashboard
ERGEN INTELLIGENCE
Track this event live

Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.

Open Dashboard

About Ergen

Ergen is a news intelligence platform that converts raw news articles into structured data. It tracks events, entities, and the relationships between them, with sentiment and attention metrics derived from thousands of articles. Pages on this site are daily static snapshots from the platform's live database. For real-time tracking, search, and alerts, the full dashboard is at app.ergen.ai.