Lloyds Bank have changed my Username/User ID without informing me

Notepad_Phil

Daliah said:

DeletedUser said:

This is what happened.

I have a joint account with my GF, she thought she had internet banking with Lloyds (I do all our accounting, so she has never needed to use it as all her other accounts are not with Lloyds)

she went to this URL:
/online.lloydsbank.co.uk/ib-access/cwa/forgotten-details/index.html#/your-details?_k=95vl8f

Filled in her details, which returned nothing as it turns out she not not setup up internet banking. She then filled in my name and DOB.

This displayed my User ID, I don't know which User ID was displayed but it was this action which changed my User ID.

So that's the breach of security and personal information. 

Highly, highly unlikely story, sorry.

There's a lot more that must have happened. 

Also, given that your girlfriend impersonated you, your issue is with your girlfriend, not with Lloyds.

The only strange thing to me is that the web page says that it is used to find out your user id, whereas the OP says that it seems to have changed their id. 

Daliah

Notepad_Phil said:

Daliah said:

DeletedUser said:

This is what happened.

I have a joint account with my GF, she thought she had internet banking with Lloyds (I do all our accounting, so she has never needed to use it as all her other accounts are not with Lloyds)

she went to this URL:
/online.lloydsbank.co.uk/ib-access/cwa/forgotten-details/index.html#/your-details?_k=95vl8f

Filled in her details, which returned nothing as it turns out she not not setup up internet banking. She then filled in my name and DOB.

This displayed my User ID, I don't know which User ID was displayed but it was this action which changed my User ID.

So that's the breach of security and personal information. 

Highly, highly unlikely story, sorry.

There's a lot more that must have happened. 

Also, given that your girlfriend impersonated you, your issue is with your girlfriend, not with Lloyds.

The only strange thing to me is that the web page says that it is used to find out your user id, whereas the OP says that it seems to have changed their id. 

There is lots the OP hasn't told us. And we don't have the Lloyds, or the girlfriend's, side of the story, so who knows what actually happened 

xylophone

Lloyds have apologized for whats happened and compensated me for the inconvenience, they have also acknowledged the security issue and they are looking into the GDPR breach which I was advised by the ICO to raise with them.

I can't for the life of me think why Lloyds apologised for a mistake that wasn't theirs.

Daliah

xylophone said:

Lloyds have apologized for whats happened and compensated me for the inconvenience, they have also acknowledged the security issue and they are looking into the GDPR breach which I was advised by the ICO to raise with them.

I can't for the life of me think why Lloyds apologised for a mistake that wasn't theirs.

They most likely haven't.

[Deleted User]

Well @Daliah it just goes to show how little you know.

jonesey1985

DeletedUser said:

Well @Daliah it just goes to show how little you know.

Go away money to get you out of their hair and a bunch of meaningless "we'll definitely look into that" waffle to make you think something will be done.

It won't be.

VWPolecat

I have had worse, NatWest changed my birthday.

jonesey1985

VWPolecat said:

I have had worse, NatWest changed my birthday.

Mine too, although I think it was the broker who handled my mortgage.

Still, having two birthdays has its benefits.

xylophone

NatWest changed my birthday.

That's quite some feat.......

anotheruser

DeletedUser said:

So that's the breach of security and personal information. If I dropped my wallet which contains my drivers license and debit card and my mobile, you can use those details to obtain the accounts User ID.

You could then brute force the password (most people have very weak passwords) the 1st part of login process is complete. You then brute force the second part of the login process and the unique code then gets sent to the phone. Not that difficult to do if you know how.

Do you have another customer friendly solution the bank could use for genuine "I've forgot my user ID".

If it's so easy to brute force the password (bearing in mind, most banks will have protections against so many tries), and then brute force the second password (after selecting from a drop down box, three times), perhaps you should highlight this to the bank and get a job in Lloyds Banking Group security.

Plus, you'd need the persons phone to get into their account, and this is after acquiring their wallet, which hopefully has their drivers licence in it AND their Lloyds bank card AND your mind set of wanting to get into their banking, which requires extra steps when setting up a new person to pay before emptying the account.  Lots of hoops.




Basically, you've made a load of stuff up, things you think are now fact and can't imagine taking any responsibility for this.

Go back to your usual account for the forums (we can all see this is a temporary account made for this thread), keep your compo and get on with your life.  I'd also advise switching from any Lloyds banking group banks as they all work in the same way, with the same "vulnerability" you seem to think there is.