Democrats press major banks to spell out how they will manage AI and cyber risks

Large U.S. banks, including JPMorgan Chase and Wells Fargo, are facing fresh political pressure to explain how they plan to address cyber threats tied to emerging technologies. Congressional Democrats are calling for more transparency from major financial institutions about their approaches to managing AI-related risks and related cybersecurity exposures, according to a report by Yahoo Finance.

The request reflects a growing theme in Washington: that AI systems can expand the speed and scale of cyber activity, while also increasing the number of systems and data pathways that attackers may target. For banks, the concern is not only whether AI creates new vulnerabilities, but also whether banks can validate, monitor, and defend AI-enabled processes that touch customer information, internal operations, and financial controls.

While banks have been investing in “responsible AI” practices, lawmakers appear to be asking for more concrete disclosure than the broad public statements companies typically make about governance, model risk management, and security. The pressure comes as the industry continues to scale AI use cases, including automation of customer workflows and internal analytics, which may introduce new technology stacks and third-party dependencies.

The issue sits alongside longstanding cybersecurity expectations for banks, but with AI adding complexity. AI systems can be difficult to interpret, and they often rely on large datasets and machine-learning components whose behavior can drift over time. Sector commentary has noted that banks are rapidly building “responsible AI” capabilities and appointing leadership to oversee them, underscoring how quickly the risk management workload is expanding across the financial sector.

Bigger banks have significant incentives to provide detailed, credible explanations because regulators and lawmakers can use disclosures as a baseline for oversight. However, the Yahoo Finance report does not provide bank-specific details on what JPMorgan Chase, Wells Fargo, or other named institutions have disclosed so far, nor does it specify what level of detail lawmakers expect in their submissions.

JPMorgan Chase and Wells Fargo also have ongoing technology initiatives that make the cybersecurity and model-risk questions more immediate. As banks adopt more AI-driven tools, they must integrate security controls into model development, deployment, and monitoring, while ensuring that data handling meets strict standards for consumer and enterprise information.

Still, important specifics remain unclear. The report does not list the proposed disclosure format, timeline, or whether the requests are tied to formal legislative action, hearings, or a set of regulatory-style questionnaires. It also does not indicate whether lawmakers are asking for disclosures about specific AI systems, third-party vendors, incident reporting practices, or testing and auditing results.

What to watch next is whether the banks respond publicly, whether regulators incorporate the request into supervisory priorities, and whether Congress moves from general pressure to concrete disclosure requirements. Given the pace of AI adoption in banking, additional scrutiny could quickly broaden from cybersecurity into areas such as model governance, data provenance, and incident readiness for AI-enabled systems.