Kiwibank privacy breach

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › Kiwibank privacy breach

Rikkitic

Awrrr
18660 posts

Uber Geek

Lifetime subscriber

#272995 29-Jul-2020 16:48

I see there has been yet another privacy breach at Kiwibank. This comes just after hundreds of customers have been threatened with frozen accounts because of another bank stuff-up. This seems to be a regular, recurring thing with NZ institutions, especially government ones. They all go on about how seriously they take our privacy, but this kind of thing keeps happening. Why should anyone trust any (quasi)official body here?

More to the point, if a bad actor receives someone else's bank statement, can they compromise the account of the person whose statement that is? The account number will be on it, as well as the name, address and access number of the account holder. Is that enough to make it valuable on the dark web or is more required? How bad is this breach, actually? What is the potential damage?

Plesse igmore amd axxept applogies in adbance fir anu typos

antonknee

1133 posts

Uber Geek

#2531227 30-Jul-2020 09:30

If you knew some other PII about the person, it could be a vulnerability. Eg when calling the bank I've often been asked to confirm name, DOB, address and three recent transactions.

Edit: Although I see in this instance, you were given your own account details, just the transactions were someone else's - so I imagine fairly low risk of the above.

Zeon

3916 posts

Uber Geek

Trusted

#2531238 30-Jul-2020 09:39

I actually read Kiwibank's privacy policy when they asked for quite sensitive financial information. It's super loose like they can give any data to random marketing partners etc. I refused to give them the information.

How about they spend less time worrying about the moral superiority they have of not providing their services to brothels and start to work on the fundamentals of being a trusted bank.....

Speedtest 2019-10-14