Forest Global Training Partners

Cyber Risks · Krebs on Security

Chase ‘Glitch’ Exposed Customer Accounts

Summary: Chase.com customers reported logging in and seeing other customers' account details during a Wednesday evening incident between 6:30 pm and 9 pm ET, which Chase attributed to an internal glitch rather than hacking or a cyber attack. Chase communications director Trish Wexler said the issue affected a "pretty limited number of customers" on both chase.com and the Chase mobile app, and that the bank was still determining the cause and the total number affected. Security researcher Kenneth White said the reports suggested a caching server configuration error, noting that caching active content or raw data is something a banking app should never do.

What you should know: A customer's spouse was shown another Chase customer's account with an Amazon and Chase card and a balance of more than $16,000 - and Chase said it still did not know how many customers were affected or what caused it.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related