A major payments provider outage caused by ransomware isn't just a headline - it's a wake-up call. Using BridgePay's February 6 ransomware incident as a case study, we explore how multiple systemic failures - not a single flaw - are almost always behind these outages, and why treating security as a checkbox isn't enough.

Whether you're buying, selling, or investing in a FinTech company, security due diligence is more than a checklist - it's about reading between the lines. We break down what really matters in tech and security evaluations, and how to avoid expensive surprises post-close.

Many ISVs assume they're out of PCI scope because they use hosted fields or JavaScript SDKs that “keep them away” from cardholder data. But PCI applies not only to who handles the data — but to who could impact the security of it. That means ISVs are in scope, and here's why.