Bank of America had to hire 1,000 contractors to patch software flaws spotted by Anthropic Mythos

Bank of America hired 1,000 contractors and spent hundreds of millions fixing AI-discovered vulnerabilities Anthropic’s Mythos uncovered enough flaws to trigger large-scale remediation across major banks Financial institutions warn advanced AI security tools are exposing weaknesses faster than teams can patch them Bank of America, one of the largest financial institutions in the United States, was forced to hire a thousand people on contractor roles, and spend north of a $100 million dollars to fix all of the bugs found by the famed Mythos, Anthropic’s generative artificial intelligence (GenAI) model.

When Anthropic first unveiled Mythos in April 2026, it described it as a tool with advanced cybersecurity capabilities that can autonomously discover and exploit previously unknown software vulnerabilities.

However, the tool was so capable (and dangerous) that Anthropic locked it down, giving access to a handful of vetted organizations: the US government, critical infrastructure organizations, banks, and some cybersecurity firms, to name a few.

Bank of America and JPMorgan Chase Bank of America was apparently one of those companies, as speaking to CNBC , the bank’s CEO, Brian Moynihan, said that when Mythos started finding bugs in the system, the company saw it as “real risk”, and was forced to sit down and come up with a plan to address all of the vulnerabilities.

“We put on 1,000 contractors to help us do the patching work in the second quarter, and those people remain here today, helping us, on top of the 3,000 people we have in that area,” he told the publication.

CNBC added that Moynihan told analysts earlier that day that the company spent “a couple hundred million plus” on fixing bugs and addressing regulatory issues.

Even for a bank of that scale, such hiring and spending sprees are uncommon, to put it mildly.

That’s likely why Moynihan added that the spending increase was temporary and that, once the vulnerabilities are addressed, there won’t be as much work as there is now.

“Once you patch, you don’t have to patch as much. … The pipeline moves through,” Moynihan said.

In its report, The Next Web put it in the context of staying compliant with state and federal regulations.

“The compliance spending follows Treasury penalties of more than $1.21 billion announced on 13 October,” the publication wrote.

“Federal regulators said the bank had failed to report suspicious transactions worth $5 billion and to finish steps ordered in 2024.” Severe fallout Bank of America is hardly the only bank rushing to fix what Mythos exposed.

A few months ago, the CEO of JPMorgan Chase, Jamie Dimon, said the bank was working with peers and vendors to make sure its systems are prepared for what’s coming.

“It’s serious work,” Dimon said in a Bloomberg TV interview .