Credit card data of 17K ICICI Bank users exposed; bank blocks cards, assures compensation
- 1141
- 18
-
- Last Comment
https://in.investing.com/news/credit-card-data-...
New Delhi, April 25 (IANS) After credit card data of at least 17,000 new ICICI Bank (NS: ICBK ) customers was exposed and reached "wrong users", the bank said on Thursday that it has blocked these cards and is issuing new ones to the customers.The issue surfaced after some ICICI Bank customers voiced concerns on social media about the bank's iMobile Pay app exposing credit card details, including their full number and card verification value (CVV).
On the finance-related forum Technofino, several users reported seeing sensitive data such as the full card number, expiry date, and CVV of unknown customers’ credit cards of some users suddenly on their iMobile Pay app.
In a statement to IANS, the ICICI Bank spokesperson said that it came to their notice that "about 17,000 new credit cards which were issued in the past few days were erroneously mapped in our digital channels to wrong users".
"No instance of misuse of a card from this set has been reported to us. However, we assure that the Bank will appropriately compensate a customer in case of any financial loss," the spokesperson added.
According to the bank, the number of impacted credit cards constituted "about 0.1 per cent of the bank’s credit card portfolio".
"As an immediate measure, we have blocked these cards and are issuing new ones to the customers. We regret the inconvenience caused," said the ICICI Bank spokesperson.
One of the users wrote on Technofino: "I have access to someone else’s Amazon (NASDAQ: AMZN ) Pay CC due to a security glitch on the iMobile app. Although OTP restricts domestic transactions, I can do international transactions using the details from the iMobile app."
The iMobile Pay app, launched in 2008, has more than 28 million users.
- Sort By
Lagta hai kotak ke bad next number inka lagne wala hai 
Roj roj cc data leak ho jata hai inka
omg axis had international transaction issue and now icici got exposed?
hmm next on the line to get exposed ... any one guess? xDDDDDD
Aj kal to kisi card ki limit 25-50 se above rkhne ka fayda ni h, just enhance the credit limit every time but most of big frauds happen when there is no bar/restrictions on domestic/international transactions
It is leaked within icici customers (not outside).
Means: 17k cards were exposed to existing customers of icici bank.
Scary part was "leaked card was visible in iMobile app to random users and they were able to control cards settings too as like they control their cards, number cvv and expiry all were placed as it is their card, some users were able to see upto 10 different cards (amazon pay card of 10 different users) in their iMobile with complete control including limit and transaction settings modification.
So disabled or inactive settings weren't helpful in this case but yes it was not leaked to other than icici customers.
That's it.
So today I read on Twitter that someone gave otp to someone claiming from ICICI Bank and their card got debited almost 1.5 lakhs
I follow simple rule- just block your all cards temporarily and deactivate all transaction usages. Only unlock and activate your card when you are performing any transaction. This two step ensures that even if your card is unblocked by any means you'll have to activate your usage transaction individually each and every time.
Due to this, I forget sometimes, my transaction gets failed due to temporarily block and deactivated transaction channel usages.
Scary