Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

Customers of three UK banks report being able to see other people’s accounts on app

⁨59⁩ ⁨likes⁩

Submitted ⁨⁨2⁩ ⁨weeks⁩ ago⁩ by ⁨Veserr@sh.itjust.works⁩ to ⁨unitedkingdom@feddit.uk⁩

https://www.theguardian.com/business/2026/mar/12/customers-of-three-uk-banks-report-being-able-to-see-other-peoples-accounts-on-app

source

Comments

Sort:hotnewtop
  • BigTwerp@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

    For those of you wondering if you might have been affected but can’t find out because the article is paywalled: Lloyds, Bank of Scotland and Halifax are the ones affected.

    source
    • Link@rentadrunk.org ⁨2⁩ ⁨weeks⁩ ago

      It’s not paywalled but it is behind an obnoxious cookie prompt. You can hide it with most browsers (iOS Safari or UBlock Origin in Firefox are two examples) and access it anyway without consenting to their cookies.

      source
      • BigTwerp@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

        That’s all very well but 1) I’m reading this using firefox with clean cookies and.ublock origin and the block is still there. And 2) a cookie paywall is a defacto paywall.

        source
        • -> View More Comments
  • ashughes@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

    Meanwhile I can’t use the Bank of Scotland app on Graphene OS because apparently GOS isn’t secure enough.

    source
  • TheReturnOfPEB@reddthat.com ⁨2⁩ ⁨weeks⁩ ago

    That happened to me with my bank updated their app. Suddenly I could browse and move money in and out of others’ accounts. I had to fail-hold for 45 minutes for someone to tell me don’t worry about it. Literally had to call out the CEO’s “mission accomplished” blogpost and say “yeah no your rollout wasn’t perfect. fix my shit.” because customer services refused to do anything.

    good times in the 21st century.

    source
    • Gentryfried@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

      That’s insane. How long has this been a thing??

      source
      • mjr@infosec.pub ⁨2⁩ ⁨weeks⁩ ago

        Banks using less secure IT than their customers but having tons of annoying security theatre? Oh, at least 30 years.

        source
  • mannycalavera@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

    Hmm I wonder who does their IT?

    source
    • mjr@infosec.pub ⁨2⁩ ⁨weeks⁩ ago

      Copilot?

      source
      • mannycalavera@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

        IBM I’m guessing given the historical contacts and scale of fuck up.

        source
  • blackn1ght@feddit.uk ⁨2⁩ ⁨weeks⁩ ago

    The DPO Controller at the banks: I picked the wrong week to stop sniffing glue!

    source
    • mjr@infosec.pub ⁨2⁩ ⁨weeks⁩ ago

      Yep, because one of your programmers used it to start sniffing glue, it seems!

      source
  • MrsDoyle@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

    Well that sounds like fun! Shame I’m with a different bank.

    source
  • fox2263@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    Sounds like someone vibe coded a bug fix haha

    source