Email from the AA - 'Password changed correctly' - AA hacked?

w06

and 21 hours later still can't access my account,

Shoshannah

http://www.theaa.com/about-us/we-sent-an-email-in-error

The_AA_Company_Representative

Hello,


The team are still working on a fix for this, so please allow them time to do this before attempting to log in.
Again, please be assured that your personal data remains secure and the email was sent form us in error.


Kindest regards,
The AA's Social Media Team

JP08

The Register had a little article today on this subject.

https://www.theregister.co.uk/2017/06/26/aa_false_alarm_email/

The_AA_Company_Representative

Silver_Shark wrote: »

I've cancelled my direct debit to them, not due out until December but I don't know what else to do.

Hi there,


We regret to read that this error has caused you to cancelled your direct debit with us. We can assure you that all of your data is secure and your password hasn't been changed.
We're extremely sorry for any confusion this has caused you today.


Kindest regards,
The AA's Social Media Team

Doc_N

Still waiting for an explanation as to:

1 Why we were all locked out of our accounts

2 Why password reset requests produced this response:

"Sorry, something's gone wrong. Please call us on 0330 102 8005"


Something about all this just doesn't look right. Is there a cover-up?

FionaDA

Same here. It will not allow me to log in. I have a feeling the second email is from the hackers as well. When are AA going to state what is really going on and also reset the login's for their customers.

w06

And here, it seems the AA don't realise, or want to realise, the implications for their customers of passwords being gained to a site that holds or may hold bank and card details. 'Nothing to worry about ... don't contact us...' isn't good enough.

All I want to do is check what details of mine are held on the site, and I can't do that because I can't log in.

My bank card details were stolen and used fraudulently a couple of months ago, from a site that also had my address and my name in a specific format, the AA was one of a short shortlist of places they could have been stolen from. Thankfully for me I think that site if it has any of my card details has the cancelled card only, but the AA's response is anything but reassuring.

DavidT

Disappointed in the AA to be honest. Took a very long time for them to confirm it wasn't a hack and they still haven't given a proper explanation. It's all very evasive and coy isn't it? What actually happened?

takman

w06 wrote: »

And here, it seems the AA don't realise, or want to realise, the implications for their customers of passwords being gained to a site that holds or may hold bank and card details. 'Nothing to worry about ... don't contact us...' isn't good enough.

All I want to do is check what details of mine are held on the site, and I can't do that because I can't log in.

I've never known any site to show full card details when you log in because it is too risky. So considering the AA is a big company if they did do this then they would have been forced to stop this long ago.