Security News > 2020 > March > Delicious irony: Credit rating builder Loqbox lets customer details and card numbers slip after 'sophisticated attack'
The company, which aims to help consumers improve their credit ratings, told customers that an external attack had compromised the two digits of bank account numbers used to make payments and the sort codes customers can use to unlock their savings.
Loqbox works by a customer nominating a savings target and Loqbox creating an interest-free loan for that amount.
As the customer pays off the loan, Loqbox reports the repayments to credit reference agencies, which then improves the customer's credit score.
Venting their frustration on Twitter, one apparent customer said: "I understand that following a cyber attack my bank details are now in the hand of hackers as well as my DOB, address and other personal data and you send me an email apologising!!!!!! #thanksfornothing."
A Loqbox spokesperson told The Register: "This was a sophisticated cyber-attack on our company which we are still investigating. As soon as we became aware of what had happened, we brought in cyber security experts and a specialist law firm. We now know that some personal information relating to our customers was obtained by the hacker. We are truly sorry for the worry and inconvenience this has caused and we are informing our customers about what they can do to protect themselves. No LOQBOX Funds have been affected."