Rule · PMA · 19 Feb 2017
The Palestine Monetary Authority issued Circular No. 31/2017 to alert all operating banks to a new criminal technique involving physical drilling into ATMs to access internal data cables and hijack them via specialized devices, particularly targeting unencrypted machines. The circular mandates that all banks immediately implement necessary preventive safeguards and conduct regular physical inspections of their ATM networks to mitigate this specific vulnerability. Financial institutions are required to ensure continuous monitoring and system hardening to prevent unauthorized access, hacking incidents, or physical theft of ATM components.
Circular No. (31/2017)
To all banks operating in Palestine
Date: Sunday, 19 February 2017
Subject: Emerging Criminal Methods in ATM Hacking and Theft.
With reference to the above subject, and to information regarding emerging criminal methods in ATM hacking and theft, which involve drilling into the ATM to access the internal data cables in order to control it via special devices, and noting that this method is used on ATMs that do not utilize an encryption system, all banks are hereby requested to take the necessary preventive measures and safeguards to ensure that ATMs are not exposed to any hacking incidents or theft attempts, and to conduct periodic inspections of all ATMs to prevent such incidents from occurring.
Deputy Governor
for Financial Stability
Ramallah - Palestine P.O. Box 452 | Tel: +970 2 2415250 | Fax: +970 2 2409922 Gaza - Palestine P.O. Box 4026 | Tel: +970 8 2825292 | Fax: +970 8 2844487 Email: info@pma.ps
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
More like this from PMA
PMA published 4 documents in the last 30 days. We email you each new one the day it's published.
Source: Palestine Monetary Authority — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated