We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

REAL ICICI SECURITY BREACH - login to someone else's account

I have just opened two Hisave accounts for myself and my mum with ICICI. I logged in with my mum's security details but was actually taken to someone else's account. I seemed to have full access and could check his balances, download statements, and I assume transfer money. Obviously this is extremely worrying, more so because I'm wondering who the hell can see my accounts.

I've called up ICICI and reported this. The guy on the other end was fairly helpful but did not seem too overly concerned with this security breach. It seemed like no one was in as he told us that they would contact my mum tomorrow.

Has anyone else had anything similar happen. I'm thinking of closing my accounts immediately as this is really worrying. The whole online banking systems looks very amateur in comparison to my other accounts and this seems to be the nail in the coffin for me.

Will update with what they tell me tomorrow.
«1

Comments

  • rrwfotr
    rrwfotr Posts: 573 Forumite
    I've been banking with icici now for over 3 years never had any issues like this before, I assume it's a set up error with the account.
  • LittleVoice
    LittleVoice Posts: 8,974 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    I withdrew from setting up an ICICI account when I began to realise that they did not appear to be operating in accordance with their registration under the Data Protection Act. It seems they have now changed their registration - so that it is now showing that data is transferred outside the EU.

    Ravmania's reported breach of security may be a "set up error with the account", but given the apparent consequences is a rather serious one and they should be more concerned than they appear to be.
  • DocProc
    DocProc Posts: 855 Forumite
    Part of the Furniture 500 Posts Combo Breaker
    All apparently OK here with my stuff.

    Since each account has only one username and one password and one linked account, I think this is some kind of a set-up error for the account which Ravmania accessed too.
  • ravmania
    ravmania Posts: 11 Forumite
    So they called my mum today... and nothing has really happened. They said they would call back tomorrow. As of right now I can still log into someone else's account with full access.

    I can (sort of) understand that this was originally a simple mistake with setting up the account, but this is just starting to seem like they have a really lax attitude to their customers security and confidentiality. I can't believe any of my other banks would have not sorted this out by now or kept me more informed on the situation. I really get the feeling that they're not too bothered.

    Maybe something will happen tomorrow?
  • Transfer it to my account in the cayman isles. Give me your addy and ill post you 50% in gold coins, everyones happy :)



    only kidding
  • ravmania
    ravmania Posts: 11 Forumite
    Well they didn't call my mum yesterday so she called them. They told her they'd call her today but, surprise surprise, they didn't. I reported this four days ago. Is no one else worried that ICICI are obviously not too concerned about their customers security. I feel really sorry for the poor guy who's account I can access. I'm guessing he hasn't got a clue.
  • morg_monster
    morg_monster Posts: 2,392 Forumite
    is it possible for you to find out the name and address of the guy whose account you can access, perhaps through a "your details" section. I just wonder whether you should write to him and let him know (in a non-scary way so he doesn't report you to the police!), maybe 2 of you hassling them will have more of an effect. You also have to wonder whether ICICI would tell him anything about this debacle once its all sorted out.

    I'm sure someone will be able to think of any possible pros and cons of this...!
  • masonic
    masonic Posts: 27,642 Forumite
    Part of the Furniture 10,000 Posts Photogenic Name Dropper
    ICICI should not give out those details, but hey, they probably have access to somebody elses account as well.
  • debbie42
    debbie42 Posts: 2,586 Forumite
    You also have to wonder whether ICICI would tell him anything about this debacle once its all sorted out.

    If it was my account then I'd want to know!
    Debbie
  • Pagan98
    Pagan98 Posts: 162 Forumite
    Part of the Furniture 100 Posts Combo Breaker
    We gave up on ICICI when c.£1,000 went walking out of our account without trace. The response was exceptionally lacklustre - they just didn't seem to understand why we were concerned about the missing funds, it took an awful lot of calls to rectify and when they finally refunded the account we didn't receive an explanation or proper apology.

    Personally, on the basis of our experience, I wouldn't touch ICICI with a very long bargepole.
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351.7K Banking & Borrowing
  • 253.4K Reduce Debt & Boost Income
  • 454K Spending & Discounts
  • 244.7K Work, Benefits & Business
  • 600.1K Mortgages, Homes & Bills
  • 177.3K Life & Family
  • 258.4K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.