“Our customers are our utmost priority and we are wholeheartedly dedicated to safe guarding their interests. It has come to our notice that about 17,000 new credit cards which were issued in the past few days were erroneously mapped in our digital channels to wrong users. They constitute about 0.1% of the Bank’s credit card portfolio. As an immediate measure, we have blocked these cards and are issuing new ones to the customers. We regret the inconvenience caused. No instance of misuse of a card from this set has been reported to us. However, we assure that the Bank will appropriately compensate a customer in case of any financial loss,” said a statement from an ICICI Bank spokesperson.
Hindustantimes wrote, One Reddit user flagged a situation where another user’s Amazon Pay credit card details were mistakenly displayed. Additionally, users reported successful ICICI card transactions despite entering incorrect three-digit CVVs.
Renowned cybersecurity researcher Jeremiah Fowler uncovered a non-password-protected database having over 1.1 million records linked to Conduitor Limited (Forces Penpals)....
Sumantha Mandal, Founder of TechnoFino and CreditPedia, reiterated concerns about the security breach on platform X.
He stated that this error allowed users to access other customers’ credit card details, including sensitive information such as full card numbers, expiry dates, and CVVs. Mandal also shared screenshots from concerned users.
In one of the shared screenshots, a user highlighted that despite OTP restrictions for domestic transactions, he was able to perform international transactions using the details obtained from the iMobile app.
ICICI Bank, which has more than 6,000 branches in India, is in 17 countries worldwide. The iMobile Pay app, launched in 2008, has over 28 million users.