Warning: Bank of America Giving Access to Random Accounts
Andrew
oday, we received an invoice for one of our expenses. To send the payment, I logged into Bank of America’s website to use their ACH (Automated Clearing House) system. Once logged in, I was able to click on the ‘Transfers’ button. Up until this point, everything was fine and I was viewing my own account. However, after entering the transfer interface, I ran into a huge privacy issue that should have never occurred in an online banking session: I was looking at someone else’s name, bank accounts, balances, e-mail address and more.
I have attached screenshots (with some information redacted) and have also e-mailed the bank reporting the issue. I am definitely not WATSON, and these are not my bank account numbers or bank account balances. It’s clear that had I gone through with this payment it would have come out of WATSON’s account and not mine.
Logging out and logging back in seemed to fix the issue and I haven’t been able to reproduce it since its first occurrence.
Here is the letter to which we have not yet received a response:
[Awaiting Response.]
This is a serious privacy issue that needs to be addressed. If I can see someone else’s information, doesn’t that mean someone can see yours or mine?