Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Security Bug Privacy The Internet Technology

Credit Karma Glitch Exposed Users To Other People's Accounts (techcrunch.com) 9

Users of credit monitoring site Credit Karma have took to Reddit and Twitter to complain that they were served other people's account information when they logged in. TechCrunch has confirmed several screenshots that show other people's accounts, including details about their credit card accounts and their current balance.

When contacted, a Credit Karma spokesperson said these users "experienced a technical malfunction that has now been fixed," and that there's "no evidence of a data breach." The company didn't say for how long customers were experiencing issues. TechCrunch reports: One user told TechCrunch that after they were served another person's full credit report, they messaged the user on LinkedIn "to let him know his data was compromised." Another user told us this: "The reports are split into two sections: Credit Factors -- things like number of accounts, inquiries, utilization; and Credit Reports -- personal information like name, address, etc.. The Credit Reports section was my own information, but the Credit Factors section definitely wasn't. It listed four credit card accounts (I have more like 20 on my report), a missed payment (I'm 100% on time with payments), a Honda auto loan (never had one with Honda), student loan financing (mine are paid off and too old to appear on my report), and cards with an issuer that I have no relationship with (Discover)."

Another user who was affected said they could read another person's Credit Factors -- including derogatory credit marks -- but that the Credit Report tab with that user's personal information, like names and addresses, was blank. One user said that the login page was pulled offline for a brief period. "We'll be right back," the login page read instead.

This discussion has been archived. No new comments can be posted.

Credit Karma Glitch Exposed Users To Other People's Accounts

Comments Filter:
  • That spells "free"
    Credit Report dot com, baby!

  • by Sebby ( 238625 ) on Wednesday August 14, 2019 @06:42PM (#59087674)

    "no evidence of a data breach."

    Yeah. Except that being able to view someone else's account data absolutely is a 'data breach' (.....moron!)

    • by al0ha ( 1262684 )
      You lost me at "has took" - where in the world is that proper grammar?

      You has took all my self-restraint to not flame...
  • I stopped trusting creditkarma when I tried to do my taxes from them, and it had a clear error that was liable to cost their customers a lot of money and potentially legal troubles (it had to do with them calculating the same value in two different ways, getting two wildly different answers, for itemization, such that it would tell you that you were better off not itemizing, but when you clicked itemizing, you were clearly better off by thousands of dollars).

    No matter how I tried to hammer it through suppor

  • I just now logged in after reading this story to try to cancel my account with them (fat chance of that) and when I clicked on the help center link I was instead served some random person's report from Topeka, Kansas (I live in South Carolina).

    This is absolutely NOT fixed.

  • Glitch (Score:4, Informative)

    by JBMcB ( 73720 ) on Wednesday August 14, 2019 @07:58PM (#59087932)

    Why are people calling bugs glitches nowadays? A glitch is a one-off freak occurrence. A computer crashes once for no apparent reason. A network goes down during a thunderstorm. Everyone getting someone else's account when you log in is a bug.

  • Credit Karma was exposed as a scam years ago. An unknown company with no track record was asking for all your personal information (no very basic security mined person could understand why you would give them all your personal information "hello unknown company!") On top of all that they give you nothing. They DO NOT give you a credit score (FICO) they give you a free score that anyone can get on line. So you "pay" them with your private information that they can do anything with for your FREE credit score

Trap full -- please empty.

Working...