Banks must report major cyberattacks to regulators within 36 hours if the incident is likely to disrupt their business.

The clampdown is coming at a particularly awkward time. A group of veteran bankers and private equity investors in Texas spotted an...

Citigroup Inc. became the first Wall Street bank to agree to do a deep dive into its business on racial discrimination.