Have security or data incidents been publicly disclosed, and how were they handled?
Answered for 1 of 12 firms. Regulator notice, ICO action, or contemporaneous independent reporting
MONZO BANK LIMITED
Corroborated“If we’ve contacted you to tell you that you’ve been affected, you should head to a cash machine to change your PIN to a new number as a precaution,” advises Monzo.
Monzo advised affected customers to go to a cash machine to change their PIN as a precaution.
Independent reporting · TechCrunch · Check the source
the security lapse meant that some customer PINs were simultaneously stored in encrypted log files accessible by certain Monzo staff
TechCrunch reported that Monzo disclosed a security bug in which some customer PINs were stored incorrectly in encrypted log files accessible by certain Monzo staff.
Independent reporting · TechCrunch · Check the source
Next step: emailing the half a million customers affected, less than a fifth of U.K. Monzo customers.
The article states Monzo planned to email the half a million customers affected, which was less than a fifth of UK Monzo customers.
Independent reporting · TechCrunch · Check the source
Discovered on Friday, the “bug” has now been squashed after being spotted by one of Monzo’s security engineers
The article states Monzo discovered the bug on Friday and fixed it after being spotted by one of its security engineers.
Independent reporting · TechCrunch · Check the source
Monzo says it has since deleted the PIN information that was stored in this way, and that by 5:25am on Saturday morning, it had released updates to the Monzo apps.
Monzo stated that by 5:25am on Saturday morning it had released updates to its apps, and that it has since deleted the PIN information that was stored incorrectly.
Independent reporting · TechCrunch · manually transcribed from source document · Check the source
Although an audit hasn’t surfaced any fraud as a result, the bank was emailing affected customers to inform them what had happened and to advise that they change their PIN
The article states an audit hasn't surfaced any fraud as a result of the incident.
Independent reporting · TechCrunch · Check the source
“Over the weekend, we then worked to delete the information that we’d stored incorrectly, which we finished on Monday morning,” writes the bank.
Monzo stated it worked over the weekend to delete the incorrectly stored information, finishing on Monday morning.
Independent reporting · TechCrunch · Check the source
AJ BELL MANAGEMENT LIMITED
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
DIGITAL MONEYBOX LIMITED
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
FREETRADE LIMITED
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
No qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
IG MARKETS LIMITED
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
No qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
No qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
REVOLUT LTD
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
STARLING BANK LIMITED
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
TRADING 212 UK LIMITED
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
WISE PAYMENTS LIMITED
Not foundNo qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.
Every firm here was asked the same question against the same published standard, and every answer quotes the passage it came from. Where the answers differ, the difference is in the firms’ own documents, not in how we read them.
Darker text marks stronger evidence. A statutory register prints at full strength; a firm’s own marketing prints lighter. The methodology sets out the weightings.