Just over half of banks experienced an email-based security breach in the past year. Half experienced a mobile-related breach. Yet only about one in 10 customers recalls ever receiving a breach notification from their bank, and 57 percent believe their bank has never been breached at all. Leadership teams seeing low complaint volume and steady retention numbers read that as trust. It is not trust. It is an information gap waiting to become a crisis.
When No News Is Not Good News
Many BFSI executives still read a lack of customer complaints as evidence of customer confidence. The data suggests otherwise. A 2026 industry survey of over 1,000 US banking customers and nearly 700 banking executives, including CIOs, CISOs, and compliance leaders, shows a persistent gap between operational reality and customer perception. For executives, breaches have become routine operational risks. For customers, they are largely invisible.
That gap is not customers being naive. Most assume that if their data were compromised, the institution would inform them. When leadership interprets silence as satisfaction, they are often mistaking a lack of information for genuine trust. Both look identical in the metrics, but the consequences diverge sharply once the facts emerge.ot Survive Disclosure
This is the core error: trust that relies on customers remaining uninformed is not sustainable. It collapses as soon as the information gap closes, whether through regulatory disclosure, media investigation, or an uncontainable breach. The 2026 research shows 67 percent of customers would likely switch institutions after a serious breach. That is not a minor risk. It is a majority ready to leave once their assumptions about security are challenged.
Leaders who see proactive breach communication as a liability are misreading the situation. Institutions that build transparency into their regular customer communications are better positioned to retain customers during a security incident. For these organizations, disclosure is part of a consistent approach, not a sudden shift that signals trouble.
AI Transparency: The Next Blind Spot
Leadership is making a nearly identical mistake with artificial intelligence, and the timing could not be worse given how central AI has become to product roadmaps. More than a third of banking executives surveyed. A similar pattern is emerging with artificial intelligence, just as AI becomes central to banking products. Over a third of banking executives admit they cannot fully interpret or explain their own AI systems' outputs. Unsurprisingly, customer transparency has suffered. Many community bank customers, and a significant minority at larger banks, report uncertainty about how AI influences decisions that affect them. They neither fully explain that technology internally to their own leadership nor externally to the customers affected by its outputs. The comfortable assumption customers currently hold, that a human is making these decisions or at minimum meaningfully overseeing them, will not survive first contact with a documented AI-driven error any better than the breach-perception gap survived first contact with a documented security incident.
What Needs to Change in Leadership Practice
The corrective is not more marketing about how secure or innovative an institution is. The solution is not more marketing about security or innovation. Treat transparency as core infrastructure, not a crisis response. This requires regular, proactive communication about security posture and incidents, not silence until regulations force disclosure. It also means building AI governance so leadership can clearly explain how key algorithmic decisions are made, before facing questions from customers or regulators. Finally, leaders must recognize that trust surveys often measure comfort, not awareness, and that these measures will continue to diverge until the information gap is closed by choice, not by force. It's always been about whether the institution tells customers the truth before they are forced to find out on their own. Leadership teams that keep scoring well on trust surveys while quietly hoping no one asks too many questions are not managing trust. They are managing a countdown.
How is your institution approaching proactive transparency as part of its trust strategy, rather than relying on disclosure only after an incident? The operational implications are significant, and the trade-offs deserve direct attention.
