Friday, May 28, 2021

mBank: system error allowed clients to see account details of others

The Trusted Third Party website published an article last night which shows that some mBank customers have a big problem. "Today mBank [...] https://www.pinterest.com/pin/1085437947660215829/

The Trusted Third Party website published an article last night showing that some mBank customers have a big problem. "Today, mBank began assigning the accounts of existing customers to the accounts of customers who just opened their accounts," the editorial explains. mBank hasn't had a good run lately mBank recently worried customers by sending them push messages with strange content. This "affair" was quickly and efficiently resolved. Now the bank may have bigger problems. "We have been contacted by two people describing similar, probably related problems. Their data was modified without their knowledge and their accounts were assigned to newly opened accounts in mBank". - writes Trusted Third Party. According to what the portal describes, people who opened an account with mBank were immediately given access to someone else's existing account. It looks as if the system merged the identities of two completely different people. "According to Justyna's description, the data overwriting is so effective that the legitimate account holder "disappears" from the system for consultants. True, his accounts (and loans) remain in the bank, but they get a new owner - with a new name and phone number. The old account holder receives a notification about the change of data - but of course he can no longer do anything, because his data does not exist in the system..." - describes the portal. What exactly happened? It is not clear what exactly happened. It looks as if there was a system failure in the algorithm for generating IDs for new customers, although the company does not confirm this. The Trusted Third Party portal asked the bank about this. It received the following answer: "Due to an error, a small group of customers were able to see information regarding other people. For security reasons we immediately restricted access to the service. Customers' money is safe. We are contacting each person affected individually. We have taken all the steps required by law, business and customer safety. We sincerely apologize to all customers affected by this problem." It is possible that this is just a temporary problem. So far, the bank has not commented on its social media channels. Tags bank ID mBank

No comments:

Post a Comment