It’s one of the biggest digital banks in the world, but Monzo has a revealed a serious security flaw in its system that could have let staff access customer PINs.
The flaw meant that Monzo wasn’t storing some customers’ PINs correctly , leaving engineers able to access some log files containing PINs.
While this flaw has now been fixed, Monzo has contacted half a million customers, urging them to update their pins, the Mirror reports .
The email reads: “We keep a record of your PIN so we can check you’ve entered it correctly. We store them in a particularly secure part of our systems, and tightly control who in the company can access them.
“On Friday 2nd August, we discovered that we’d also been recording some people’s PINs in a different part of our internal systems (in encrypted log files).
“Engineers at Monzo have access to these log files as part of their job.
“We’ve deleted any information that we stored in this way, and we’ve released an update to the Monzo app.
“As soon as we discovered the bug, we immediately made changes to make sure the information wasn’t accessible to anyone in Monzo.”
Monzo says that the advice to update PINs is a ‘precaution’ , adding that ‘there’s been no fraud on your account because of this’.
How to change your Monzo PIN
To change your PIN, visit your nearest cash machine:
1. Put your Monzo card into the cash machine and enter your old PIN
2. Choose ‘PIN services’, then ‘Select a new PIN’
3. Change it to a new number
Keep up-to-date with all the very latest news, what's on, sport and everything else in Belfast and beyond with the Belfast Live app.
Only select news that interests you by picking the topics you want to display on the app's homepage. Plus, our enhanced user experience includes live blogs, video, interactive maps and slick picture galleries. Download it now and get involved.
Click here to get it from the App Store or here for Google Play .
