Malicious entry points come from websites that spoof legitimate ones, even in an innocent-looking link in an email.
Bondholders, not residents, are primary concern of Puerto Rico regulators.
The system is currently expected to come online in 2024.