ICICI Bank, one of India’s leading private banks, exposed sensitive data from thousands of new credit cards to customers who were not their recipients.
The Mumbai-based bank confirmed to TechCrunch on Thursday that its digital channels had “mistakenly mapped” around 17,000 credit cards issued over the past few days to “bad” users. The issue emerged after some customers raised concerns on social media over the bank’s iMobile Pay app exposing unknown customers’ credit card details, including their full number and card verification value (CVV).
“Our customers are our top priority and we are wholeheartedly committed to protecting their interests,” Kausik Datta, head of corporate communications at ICICI Bank, said in an emailed statement to TechCrunch. “We regret the inconvenience caused. No cases of misuse of a card from this set have been reported to us. However, we guarantee that the Bank will adequately compensate a client in the event of financial loss.
The spokesperson added that the number of affected credit cards represented approximately 0.1% of the bank’s credit card portfolio.
As financial forum Technofino reports, sensitive data such as full card number, expiration date and CVV of unknown customers’ credit cards suddenly appeared for some users on the iMobile Pay app.
“I have access to someone else’s Amazon Pay CC due to a security issue on the iMobile app. Although OTP restricts domestic transactions, I can make international transactions using iMobile app details,” one of the users wrote on the forum.
The bank’s spokesperson told TechCrunch that it has blocked the affected cards and is issuing new cards to customers.
ICICI Bank, which has over 6,000 branches in India, has a presence in 17 countries across the world. The iMobile Pay application, launched in 2008, has more than 28 million users.
techcrunch
