Klarna mobile app bug let users log into other customers' accounts

silversurfer

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,176
Klarna Bank suffered a severe technical issue this morning that allowed mobile app users to log into other customers' accounts and see their stored information.

Klarna is a Swedish bank that allows customers to make purchases and finance them over time.

Today, customers reported that when they logged into the Klarna mobile app, they were showed the account information for other users instead of seeing their own accounts.

This technical issue is illustrated in a video shared by a user on Twitter, seen below.
@Klarna @AskKlarna has a major security issue on their hands this morning!!!! Every sign in is a different persons details pic.twitter.com/0JsTGcGIgE
— Kerrie Stewart (@KezStew) May 27, 2021
After Klarna learned about the technical issue, they took their mobile app offline, which now shows a message stating, "Sorry, the Klarna app is currently down for maintenance."

Klarna states that a recent update led to the technical issue that exposed the data of 0.1%, or approximately 90,000, users.

"This is why we are sad and frustrated to inform you of a self-inflicted incident, that for 31 min affected up to 0.1%, approximately 90 000, of our users.The bug led to random user data being exposed to the wrong user when accessing our user interfaces," Klarna said in a statement about the mobile app bug.

"It is important to note that the access to data has been entirely random and not showing any data containing card or bank details (obfuscated data was visible)."

"This means that it has been impossible to access a specific user’s data. According to GDPR standards, only non-sensitive data was exposed. However we recognize that what is deemed non-sensitive is very individual, and we set our own standards higher than GDPR."
 
F

ForgottenSeer 85179

Klarna is also very present in Germany.
Issues such these show exactly why they should be avoided.

Best one is still normal online payment (Prepayment) but sadly this lacks buyer protection so using Apple Pay or PayDirekt (german PayPal alternative) is better.

(I don't list PayPal because of big privacy issues)
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top