Latitude Finance (GEM Visa) - Data Breach (March 2023)

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › Latitude Finance (GEM Visa) - Data Breach (March 2023)

1 | 2 | 3 | 4 | 5 | 6 | 7 | ... | 8

1030 posts

Uber Geek

ID Verified

Subscriber

#3053029 21-Mar-2023 19:37

This was in Stuff this morning

Latitude Financial to cover the cost of replacing 330,000 people's stolen identification following cyber attack

No real detail in the article and no mention of this on Latitudes website. Maybe details still to come.

If you can't laugh at yourself then you probably shouldn't laugh at others.

Benoire

2798 posts

Uber Geek

#3053040 21-Mar-2023 19:47

Wonder if they'll offer free credit score alerts given the mess they have created.

ANglEAUT

2320 posts

Uber Geek

Trusted

Lifetime subscriber

#3053044 21-Mar-2023 20:13

alasta: Is it common practice for financial institutions to store identity documents like this? ...

It certainly became a lot easier to store these documents because you now have them, thanks to doing everything online. If the sites with KYC requirements don't ask you to upload your drivers license, you'll have to upload your passport. 🤨

richms: ... Once verified they have no business keeping copies of this information, ...

While I agree with the over all sentiment of your post, tere is a valid reason to keeping this info (at this point in time, until something better comes along). How do you prove something in the absence of these documents. It can very quickly become a "he said / she said" type of event.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2320 posts

Uber Geek

Trusted

Lifetime subscriber

#3053045 21-Mar-2023 20:14

DjShadow: ... Looks like records from past customers may be compromised also ...

That's what I was worried about. I certainly did not get a notification via email.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2320 posts

Uber Geek

Trusted

Lifetime subscriber

#3053048 21-Mar-2023 20:33

richms:

sums up how I feel

Best you stay away from their complaints form then. I mean, who needs my birthday for a complaint form?

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

ANglEAUT

2320 posts

Uber Geek

Trusted

Lifetime subscriber

#3053052 21-Mar-2023 20:49

DjShadow: This is the main info page from Latitude about this incident: https://gemfinance.zendesk.com/hc/en-nz/articles/13777730237713-Latitude-Cyber-Incident-Update ...

The linked article has a question about replacing passports linking to the DIA site.

@dia.govt.nz

Is it still safe to use my passport as proof of identity?

Impacted Latitude customers may be concerned their passport details could be misused to commit identity fraud.

You have the option to ask DIA to apply a block in the Australia Document Verification Service (DVS) system on your behalf. This block will mean that your passport number cannot be used for digital verification in Australia, but you can still use your passport to verify your identity in person as required, such as for the purposes of taking out a loan, or a phone plan.

If you want DIA to apply a block in DVS, email us at: passportsafe@dia.govt.nz.

Let us know your current passport number, name and contact phone number, including area and country codes – we’ll call from New Zealand. Put 'Latitude Financial Services' in the subject line.

🧐 If only this was the passport equivalent of a credit freeze. 🤨

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

richms

28172 posts

Uber Geek

Trusted

Lifetime subscriber

#3053241 22-Mar-2023 11:46

ANglEAUT:

Best you stay away from their complaints form then. I mean, who needs my birthday for a complaint form?

Or a mobile number. Chances are they would just call you to take it offline and hope to make no records of what they say in response to the complaint like so many businesses do.

Richard rich.ms

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

DjShadow

4085 posts

Uber Geek

ID Verified

Trusted

#3053470 22-Mar-2023 18:48

I'm guessing all processing is stopped? The payment I made on Friday to them is still not showing up

Benoire

2798 posts

Uber Geek

#3053473 22-Mar-2023 19:02

except interest charges which appears to still be charged.

mudguard

2114 posts

Uber Geek

#3053482 22-Mar-2023 20:08

richms:

This is why I hate that the govt basically forces places to store copies of this information. Once verified they have no business keeping copies of this information, yet they are forced to by the "anti terrorism" boogeyman stories that they peddle to force people off a cash economy and making everything recorded and traceable.

The problem without keeping the ID I guess is you go into a different bank branch to do something mortgage related, pull out your licence or something that isn't on file and everything stops.

I remember my time in the bank over a decade ago and customers losing it about ID and how long they'd been a customer and the copy on file was a paper licence in a filing cabinet in a branch in another town...

michaelmurfy

meow
13242 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3053497 22-Mar-2023 21:25

DjShadow:

I'm guessing all processing is stopped? The payment I made on Friday to them is still not showing up

Yep mentioned that on the previous page. Payment I made at the start of last week and even the week before that still have not been credited. Colleague of mine is the same.

And yet, get an email payment is due…

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

wellygary

8315 posts

Uber Geek

#3055403 27-Mar-2023 14:23

kiwiharry: This was in Stuff this morning

Latitude Financial to cover the cost of replacing 330,000 people's stolen identification following cyber attack

No real detail in the article and no mention of this on Latitudes website. Maybe details still to come.

330K customers, hold my beer. its now up to 14 million.....

Serious questions have to be asked about why they are holding on to all of this info for really long periods of time..
I mean, if its to identify customers that return, why isn't the data hashed. esp things that change rarely like Drivers licenses and passport numbers...

"Latitude Financial has confirmed that details of 14 million consumers were stolen from its computer systems in a cyberattack this month, including the driver licence numbers of 7.9 million Australian and New Zealand customers.

Latitude provides consumer finance services to Harvey Norman, JB Hi-Fi, The Good Guys, Apple and recently signed up David Jones.

The victims include current and former Latitude customers stretching back more than 10 years, as well as applicants for its consumer credit services that include Harvey Norman’s interest-free loans."
https://www.stuff.co.nz/business/300840220/latitude-confirms-details-of-14-million-consumers-stolen

michaelmurfy

meow
13242 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3055405 27-Mar-2023 14:29

So this sounds like if you were ever a Latitude customer you've basically been pwned.

Welp.

DjShadow

4085 posts

Uber Geek

ID Verified

Trusted

#3055467 27-Mar-2023 19:07

If you have had a Personal Loan with Kiwibank then unfortunately you are caught up in this also: https://www.stuff.co.nz/business/money/300840473/kiwibank-counting-customers-whose-id-data-was-stolen-in-massive-latitude-privacy-breach

It just keeps getting worse...

mrdrifter

576 posts

Ultimate Geek

ID Verified

Trusted

#3055469 27-Mar-2023 19:14

This seems to have grown to the point where there should be prosecutions for breaches of the Privacy Act at a minimum retaining PII well past the point it's required let alone failing to keep it secure.

1 | 2 | 3 | 4 | 5 | 6 | 7 | ... | 8