LOQBOX Hack/Cyber Attack - Personal Info, Debit card numbers and Expiry Dates exposed - ACT NOW

[AlTech]

It’s been quite a while since I’ve done of these but this time it’s for the greater good.

 

I was just informed LOQBOX has been hacked and I thought I’d spread the message.

 

Quote

We are writing to inform you of a cyber-attack on the LOQBOX computer system.

We became aware of the attack very shortly after it happened on 20 February 2020 at which point we immediately took steps to protect the system and your personal information. We also appointed cyber-security experts to help us find out how it happened and whether our customers were at risk.

 

 First, here’s what was compromised:

Quote

We are deeply sorry to inform you that this included some of your personal information, such as your name, postal address, date of birth, email address, phone number and the following payment information linked to your LOQBOX:

•	the first six and last four digits of your 16-digit card number; and

•	your card expiry date.

Although the card number leaked isn’t the complete 16 digits I personally recommend not taking any chances and will freeze my card used and have it reissued with a new card number.

 

If you are affected I strongly urge you to replace your affected card effective immediately. 
 

The reason I know about this hack is that I personally have been affected.

 

Quote

Please be assured that all LOQBOX Funds remain absolutely secure and whilst we are deeply concerned about what has happened, the business is still functioning completely as normal.

We are doing everything we can to understand how this happened. We know from our security experts that this was a sophisticated attack. We constantly monitor our systems but have now taken further steps to improve the defences of the LOQBOX computer system. We are also liaising with the relevant regulators and have reported the incident to the police.

 

This is a fairly serious attack and I hope they get the people or person responsible.

Sources:

Email from LOQBOX

https://www.loqbox.com/en_gb/help/iIm9QOUN5ngxUx4VcNTlUoQL/

[lewdicrous]

Nice to see that they dealt with it better than slickwraps.

[TempestCatto]

They had everything in a .txt file /bet

[Curious Pineapple]

Just now, TempestCatto said:

They had everything in a .txt file /bet

And the accounting back-end ran XP SP1 as the IT guy believed that everything after that was a CIA conspiracy to steal his bank account details.

[Fnige]

On 3/1/2020 at 3:00 AM, lewdicrous said:

Nice to see that they dealt with it better than slickwraps.

Im guessing that aint a high bar to jump over

[kirashi]

On 2/29/2020 at 7:52 AM, AluminiumTech said:

It’s been quite a while since I’ve done of these but this time it’s for the greater good.

I was just informed LOQBOX has been hacked and I thought I’d spread the message.

https://www.loqbox.com/en_gb/help/iIm9QOUN5ngxUx4VcNTlUoQL/

Hmm interesting that they didn't contact customers or post an announcement to their website within the legally required timeframe of 72 hours as set forth by the GDPR. I smell a class action lawsuit brewing - now, to be clear, I really wish the public didn't even have to go through any form of legal action, however, until all companies take data security seriously, we're just going to have to continue taking whatever action is available to us.

 

EDIT: Looks like people who bank through Monzo are already taking action against LOQOX, receiving compensation from LOQBOX in hopes they won't take it to small claims court. DDC FINANCIAL SOLUTIONS is apparently bailing out LOQBOX over this entire ordeal. sigh And yet consumers don't really have a choice because even if you don't use these services, your credit score information is managed by but a handful of incompetent companies.

https://community.monzo.com/t/loqbox-cyber-attack/92676/33
 

[leadeater]

On 3/1/2020 at 5:00 AM, lewdicrous said:

Nice to see that they dealt with it better than slickwraps.

So did anything, anything at all rather than nothing. A bar so low even I could leap over 

[AlTech]

It looks like some of the Monzo Customers affected by the Loqbox hack are potentially considering a class action lawsuit against Loqbox.