Klarna Bank experienced a serious technical issue this morning that allowed mobile app users to log into other customers' accounts and view their stored information.
See also: Microsoft fixes bug that blocked May Windows security updates
Klarna is a Swedish bank that allows customers to make purchases and finance them over time.
Today, customers reported that when they logged into the Klarna mobile app, they were seeing other users' accounts instead of their own.
This technical issue is illustrated in a video shared by a user on Twitter, as seen below.
After Klarna learned of the technical issue, it took the mobile app offline, which now displays a message that says, “Sorry, the Klarna app is currently down for maintenance.”
Klarna states that a recent update led to the technical issue that exposed the data of 0.1%, or approximately 90,000, users.
“We are saddened and disappointed to inform you of an incident, which for 31 minutes affected up to 0.1%, approximately 90,000, of our users. The error resulted in the exposure of random user data to the wrong user when accessing our user interfaces,” Klarna said in a statement about the bug in the mobile app.
See also: Bugs Appeared in Apple's Tracking Transparency App
“It is important to note that the data access was completely random and did not reveal any data containing card or bank details.”
“This means that it was impossible to access a specific user’s data. In accordance with GDPR standards , only non-sensitive data was exposed.”
While Klarna claims that the bug only exposed non-sensitive data, users are reporting that this is not true. When they logged into other people's accounts, they were able to see sensitive data, including names, mobile phone numbers, addresses, saved bank accounts, purchases, and saved credit cards.
See also: Apple AirDrop: Bug could lead to user data leak!
To make matters worse, Klarna customers report that every time they log into the mobile app, they can access a different account.
Information source: bleepingcomputer.com
