Bank of America Allowing Access To Random Accounts

From PrivateInternetAccess.com also: https://www.privateinternetaccess.com/blog/ Today, we received an invoice for one of our expenses. To send the payment, I logged into Bank of America’s website to use their ACH (Automated Clearing House) system. Once logged in, I was able to click on the ‘Transfers’ button. Up until this point, everything was fine and I was viewing my own account. However, after entering the transfer interface, I ran into a huge privacy issue that should have never occurred in an online banking session: I was looking at someone else’s name, bank accounts, balances, e-mail address and more . I have attached screenshots (with some information redacted) and have also e-mailed the bank reporting the issue. I am definitely not WATSON, and these are not my bank account numbers or bank account balances. It’s clear that had I gone through with this payment it would have come out of WATSON’s account and not mine. Logging out and logging back in seemed to fix the issue and I haven’t been able to reproduce it since its first occurrence. Here is the letter to which we have not yet received a response: [Awaiting Response.] This is a serious privacy issue that needs to be addressed. If I can see someone else’s information, doesn’t that mean someone can see yours or mine?

Advertisements