Fleet Credit Card website flaw!

Discussion in 'Credit Talk' started by MT, Dec 7, 2001.

  1. MT

    MT Well-Known Member

    As reported by msnbc.com

    http://www.msnbc.com/news/669356.asp


    Dec. 7 â?? A Fleet Credit Card Services customer has discovered a serious flaw in one of the bankâ??s Web sites, apparently revealing private details of hundreds of thousands of transactions. The details, viewed by MSNBC.com, include Social Security numbers, account numbers, places of employment, and annual income. The site, mycard.fleet.com, is used by Fleet credit card customers to maintain their credit card accounts. The flaw had not been fixed as of 8 p.m. ET on Friday.

    FLEET CREDIT CARD SERVICES, a division of FleetBoston Financial, was advised of the problem around 4 p.m. ET on Friday, according to customer Jonathan Bryce. He found the flaw while checking his account earlier in the day.
    Bryce contacted MSNBC.com after the company failed to return his phone calls. A spokesperson for Fleet said he wasnâ??t able to immediately comment on the situation.
    The hole makes it possible to view records of transactions recorded at the site dating back to April of 2000. Many of the transactions are mundane address request changes or simple balance transfers that donâ??t reveal any private information. But others include much private information, including everything needed for identity theft.

    It appears that nearly 600,000 transaction records are exposed to the flaw.
    Bryce, a Web developer for RackSpace Managed Hosting in San Antonio, found the bug at work â??out of curiosity.â? He said he generally likes Fleet and the companyâ??s Web site because it offers great flexibility and allows him to maintain multiple accounts.
    But he was frustrated by the bankâ??s lack of responsiveness to his call to report the problem.
    â??Iâ??m a customer and I want this fixed ... everything Iâ??ve ever done there is viewable by anyone right now,â? Bryce said. â??I spoke with three different people there, customer service types. One said the IT department was moving and they couldnâ??t get anyone to talk to me, maybe not until Monday.â?

    Fleet Credit Card Services is headquartered north of Philadelphia in Horsham, Penn. Fleet provides consumer credit card, credit products and related services throughout the U.S. According to a recent company statement, the firm has over 9 million accounts and $15 billion in managed receivables, making it the ninth largest Visa/MasterCard issuer in the nation.
    It is not immediately known how many of those cardholders use the mycard.fleet.com Web site to maintain their accounts.
     
  2. GEORGE

    GEORGE Well-Known Member

    THAT'S NICE...I HAVE A FLEET ACCOUNT...

    IT'S MY ONLY 0.00% ACCOUNT RIGHT NOW...

    SITE IS DOWN...
     
  3. GEORGE

    GEORGE Well-Known Member

    Card Member Access
    is currently
    undergoing System
    Maintenance. We
    apologize for any
    inconvenience this
    may cause.
     
  4. amaineman

    amaineman Well-Known Member

    Wonder why site is down. : )

    Aol offered me their DSL for 30 days for free, then it is $30+ a month.
     
  5. mosdef

    mosdef Well-Known Member

    This really really sucks.
     
  6. mj

    mj Well-Known Member

    But - they fixed it in record time...


    The issues we experienced earlier causing Cardmember Access to be down have been corrected. We apologize for any inconvenience this may have caused.


    -mj
     

Share This Page