UK financial services groups stage first cyber readiness hackathon

By AI, Created 11:29 AM UTC, May 20, 2026, /AGP/ – Lloyds Banking Group, Hack The Box and Google Cloud Security hosted the first UK Financial Services Security Hackathon in London on April 27-28, bringing together 33 teams from 16 organisations. The exercise tested how banks, fintechs, tech providers and regulators perform under pressure as financial services faces faster-moving cyber threats.

Why it matters: - The hackathon was designed to test real-world cyber readiness, not just classroom knowledge, in a sector where the first hours of an attack can determine the damage. - Financial services firms rely on highly connected systems, so resilience depends on coordination across organisations, not just inside one company. - The event also showed how AI is changing both attack and defence, while human judgment still drives effective response.

What happened: - Lloyds Banking Group, Hack The Box and Google Cloud Security hosted the first UK Financial Services Security Hackathon in London over two days, April 27-28. - The competition brought together 33 teams from 16 organisations across the UK financial ecosystem. - Each team had two people, underscoring the need for fast collaboration under pressure. - Nine Lives With Zero Days, a team made up of a machine learning engineer and a senior penetration tester, won the competition.

The details: - Participants worked through challenges in web exploitation, digital forensics, OSINT investigations, cryptography and payment systems security. - The exercises required teams to find vulnerabilities and secure systems while time was running. - The hackathon also included scenarios that reflected AI’s role in both offensive and defensive cybersecurity work. - The winning team said the AI challenges were their favorite. - Matt Rowe, chief security officer of Lloyds Banking Group, said simulated exercises help organisations strengthen defensive capabilities, improve readiness under pressure and build collaboration across the wider financial services ecosystem. - Nikos Fountas, chief operating officer of Hack The Box, said exercises like this move organisations from static training to proving real-world readiness and help benchmark performance against peers.

Between the lines: - The event’s structure suggests the industry is moving toward measuring cyber resilience by performance, not policy documents or annual training alone. - The strong focus on AI reflects a broader shift: security teams need to understand how machine-driven tools can help, but also where human instincts still matter most. - The win by a machine learning engineer and a penetration tester points to a growing overlap between data science skills and security operations.

What’s next: - The organisers did not announce a follow-up event, but the format creates a template for future sector-wide readiness exercises. - Financial firms are likely to keep pressure-testing response teams as threats become faster and more coordinated. - Hack The Box said its platform is built to upskill both humans and AI agents, signaling more training environments that blend people and automation.

The bottom line: - The hackathon turned cyber resilience into a live competition, and the message was clear: technology matters, but people still decide how well an organisation holds up when an attack starts.