Morrison More Breach - It's all the customer's fault!

Simon_Cox

I agree that the security isn't there, although Morrisons could easily implement 2 factor authentication as all of their competition has done. Even easier would be to implement an 8 character minimum password with mix of character type enforced. This is pretty basic stuff on any site. (5 character passwords using any case and no mix enforced, would have been poor 20 years ago, let alone in 2020)
Also, basic customer service standards should exist as a matter of course. Customer details have been breached, maybe not externally, but they do have previous form for employees plundering customer points on a large scale. To simply say to customers "Tough luck, your fault" is unacceptable by any standards.
I will certainly never shop with them again, and there are a growing number that agree with me.

jonesMUFCforever

Why not cash in the £5 vouchers as you go along? That way the most you would lose if hacked is £5 plus a few quid - I never let them pile up in an account - same goes for tesco and Quidco etc

Simon_Cox

Why not Morrisons just use adequate security?

splatt30

I am waiting for the call back which I suspect will never happen.

If I report my card stolen and request a new one will getting a new card number and changing the password on the account prevent the same happening again? I am assuming they have my card details on an app n their phone so will need a new card number????

Simon_Cox

Exactly correct. The Morrisons More app will stay logged in on any device that is currently logged in. The app won't force you to authenticate after a card change or a password change. They know this is the case, they also know of the other security issues I have listed - yet they refuse to do anything about it. They maintain none of this is their fault, they haven't had a breach, their system is secure, they take internet security very seriously bla bla bla .........  The points thefts are completely the fault of their customers according to them.
A complete joke of a company!

Simon_Cox

To be safe -  close your account and create a new one to start afresh .... if you really want to.
Best bet though is to close your account, request that they remove all data that they hold for you and shop with a more secure company that provide proper customer service.

wilko77

Another data breach!!!! £10 worth spent in Falkirk. I live in Derbyshire, so a bit of a way for a weekly shop. Told couldn't prove it wasnt me and wouldn't be refunding me my points. FUMING!!!!

Simon_Cox

They seriously don't give a stuff. Never known a company like this. It's almost as if they want their customers to shop with their competitors instead of with them.

elonmusk

I just noticed this, in July £60 vouchers were loaded and £30 have been used in Willenhall....I am in London.....

SpanishBlue

It seems Morrisons are finally updating their security.