---
type: "post"
id: "bank-of-america-hires-1-000-contractors-after-b91da7"
slug: "bank-of-america-hires-1-000-contractors-after-b91da7"
title: "Bank of America hires 1,000 contractors after Mythos found flaws"
description: "Bank of America’s disclosure makes the defensive labor response to advanced vulnerability discovery unusually legible."
retrieval_nugget: "Bank of America’s disclosure makes the defensive labor response to advanced vulnerability discovery unusually legible."
published_at: "2026-10-16"
updated_at: "2026-10-16"
record_date: "2026-10-16"
date_kind: "published_at"
topics: ["security"]
source_urls: ["https://www.cnbc.com/2026/10/14/anthropic-mythos-bank-of-america-hiring-cost.html"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:bank-of-america-hires-1-000-contractors-after-b91da7"
status: "published"
visuals: []
editorial_provenance: {"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:158ee5580346109f83fc83695965cb0c87ef75e1cca4577216c54d1355325f0b","reviewed_at":"2026-10-16T12:08:14.601Z","source_evidence_count":1,"verified_claim_count":3,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":3,"implication_count":2,"watch_condition_count":1,"related_record_count":0}
analysis: {"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"Frontier-model vulnerability discovery can create a near-term remediation workload that is material enough to require dedicated external staffing.","observed_facts":[{"text":"Bank of America said it added 1,000 external contractors in the second quarter to help patch software vulnerabilities.","source_urls":["https://www.cnbc.com/2026/10/14/anthropic-mythos-bank-of-america-hiring-cost.html"]},{"text":"The contractors remained alongside 3,000 internal staff in that area.","source_urls":["https://www.cnbc.com/2026/10/14/anthropic-mythos-bank-of-america-hiring-cost.html"]},{"text":"Third-quarter spending of “a couple hundred million plus” combined software remediation and anti-money-laundering compliance issues.","source_urls":["https://www.cnbc.com/2026/10/14/anthropic-mythos-bank-of-america-hiring-cost.html"]}],"mechanism":"The bank expanded patching capacity with contractors and internal staff to work through identified software vulnerabilities; Moynihan described the pipeline as temporary, with costs expected to decline as patches are completed.","why_now":"The disclosure supplies headcount and spending details after the bank’s third-quarter earnings, rather than only a general warning about AI-enabled cyber risk.","implications":["Organizations facing a similar backlog may need to treat vulnerability remediation capacity as a real operating cost of frontier-model capability, not just a security-team concern.","The bank’s projected internal AI savings are a separate figure and are not shown to offset remediation spending."],"evidence_boundary":"The reported third-quarter “couple hundred million plus” covered software remediation and anti-money-laundering compliance issues together, so the source does not establish the remediation-only bill or attribute all flaws to Mythos.","watch_conditions":["Whether Bank of America later reports remediation costs separately and confirms that they decline as the patching pipeline clears."],"related_records":[],"new_branch_reason":"No prior New Runtime record was supplied; this records the measurable staffing and spending response as a distinct analytical branch."}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/bank-of-america-hires-1-000-contractors-after-b91da7/","markdown":"https://newruntime.com/posts/bank-of-america-hires-1-000-contractors-after-b91da7.md","json":"https://newruntime.com/posts/bank-of-america-hires-1-000-contractors-after-b91da7.json"}
---

# Bank of America hires 1,000 contractors after Mythos found flaws

## Retrieval answer

Bank of America’s disclosure makes the defensive labor response to advanced vulnerability discovery unusually legible.

Bank of America’s disclosure makes the defensive labor response to advanced vulnerability discovery unusually legible. Bank of America added 1,000 external contractors in the second quarter to help patch proprietary and vendor software flaws exposed by advanced models including Anthropic’s Mythos. The contractors remained alongside 3,000 internal staff in that area. These are reported facts from CNBC’s account of CEO Brian Moynihan’s comments.

Thesis: Frontier-model vulnerability discovery can create a near-term remediation workload that is material enough to require dedicated external staffing. Mechanism: The bank expanded patching capacity with contractors and internal staff to work through identified software vulnerabilities; Moynihan described the pipeline as temporary, with costs expected to decline as patches are completed. Why now: The disclosure supplies headcount and spending details after the bank’s third-quarter earnings, rather than only a general warning about AI-enabled cyber risk. The reported third-quarter “couple hundred million plus” covered software remediation and anti-money-laundering compliance issues together, so the source does not establish the remediation-only bill or attribute all flaws to Mythos.

First implication: Organizations facing a similar backlog may need to treat vulnerability remediation capacity as a real operating cost of frontier-model capability, not just a security-team concern. The same source says savings from about 130 internal AI projects are expected to rise from $300 million this year to $700 million in 2027, but it does not show that these projects offset remediation spending. First watch condition: Whether Bank of America later reports remediation costs separately and confirms that they decline as the patching pipeline clears. This is a distinct analytical record because no prior New Runtime record was supplied; it documents measurable remediation labor and spend, not a general account of model security.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Security](https://newruntime.com/topics/security.md): Explore the security topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)