Bank of America Hired 1,000 Contractors to Repair Software Flaws Exposed by Mythos AI, CEO Says
Bank of America Hired 1,000 Contractors to Repair Software Flaws Exposed by Mythos AI, CEO Says #
Bank of America enlisted about 1,000 external contractors in the second quarter of 2026 to repair software vulnerabilities found by Anthropic’s Mythos AI model, chief executive Brian Moynihan said on 14 October during the bank’s third-quarter earnings call and in a follow-up interview with CNBC.
Those contractors joined roughly 3,000 internal employees already working on the repairs, Moynihan said, and are still on the job. The patching covered both the bank’s own proprietary code and software from outside vendors.
Anthropic released Mythos to a select group of financial institutions, technology companies, and government agencies in April 2026 under a program called Project Glasswing. In controlled testing, the model was able to identify and exploit software flaws autonomously, including vulnerabilities that had lain dormant in widely used operating systems and browsers for decades. The disclosures led Federal Reserve Chair Jerome Powell and Treasury Secretary Scott Bessent to convene the country’s largest bank CEOs to discuss the cyber risks involved.
Moynihan told analysts that the third quarter included “a couple hundred million dollars plus” in one-time costs, covering both the Mythos remediation work and separate compliance spending tied to an anti-money-laundering enforcement order. He declined to break out the two figures but said both lines of spending would decrease as the remediation work winds down.
Moynihan’s comments are among the first from a senior executive to attach specific headcount and cost figures to the industry’s response to Mythos. Banks and regulators have acknowledged the dual-use risks posed by frontier cybersecurity models, but detailed public disclosures of remediation costs have been rare.
Bank of America shares fell sharply on the day of the earnings release. Moynihan attributed the pressure to a combination of the remediation costs and the AML penalty rather than the Mythos work alone. The bank has not indicated when the contractor contingent will be wound down.
Copy link