Santander re Debenhams. Security breach

richardgb_2

Has anyone else received an email from debenhamscards@santander.com which welcomes you to the Debenhams OnLine Account Manager, and rather worryingly gives the temporary password of another named customer and the customer's postcode?

I've tried flagging this up with both Debenhams and Santander. So far with little luck, but my quest continues.....

Regards

Paul_Herring

Sounds suspiciously like a phishing mail, and nothing to do with either Debenhams or Santander.

Especially since it's GE Money, and not Santander, that supply Debenhams with their credit card.

I beleive you're wasting your (and their) time pestering either Debenhams or Santander about this.

EarthBoy

Paul_Herring wrote: »

Especially since it's GE Money, and not Santander, that supply Debenhams with their credit card..

Not any more it isn't. They were taken over by Santander and changed their name to Santander Cards a while ago now. You obviously haven't read the link you have provided because it says at the bottom of the screen:

"The Debenhams Card is issued by Santander Cards UK Limited."

richardgb_2

Thanks for the input Paul, but I assure you it's not a phishing email. I know exactly what such emails look like, (received dozens of them over the last couple of years and am pretty savvy on that matter), and what they contain and this certainly isn't one. For instance it gives the correct telephone numbers for raising queries about the card, i.e. the same numbers that appear on the card and paperwork, and the web site offered as a link is a genuine debenhams URL and not some obvious spoof site.

Maybe in the past GE did issue the Debenhams card, can't comment, I only received my Debenhams card a couple of weeks ago, (I actually thought I'd signed up for a Store card and not a cc - but that's another story).

I'm sitting here looking at it and it quite clearly says it is issued by Santander, as does all the paperwork that came with it. (As yet of course I haven't activated it until this apparent security breach has been acknowledged and sorted).

Not only that but when I contacted Debenhams pointing out that from a Customer Relations point of view they might like to know that a card issued in their name was potentially at risk, they simply said that they couldn't enter into correspondence because "Santander don't accept emails from us because we are a third party (due to the the Data Protection Act)".

They then rather shot themselves in the foot however by going on to say that the Debenhams store card is operated in partnership with Santander. I pointe out that the two statements are mutually exclusive but I've not yet heard back.

On the one occasion I navigated my way through Santander's almost impenetrable call system (at their premium rates of course - and now that is a scam), I found a call centre operative who seemed to acknowledge that she was just becoming aware of the problem, but she couldn't do anything more than register a complaint. There was no mechanism for escalating this to a higher authority, and I'm still awaiting a response to a snail mail letter.

No. On the face of it this seems a serious breach of security.

I'll update this forum when I find out more.

Regards

Paul_Herring

richardgb wrote: »

On the one occasion I navigated my way through Santander's almost impenetrable call system (at their premium rates of course - and now that is a scam),

http://saynoto0870.com/companysearch.php?search_name=santander

0113 2807080 or 01908 680123 would appear to be a cheaper method.