Security News > 2021 > May > Klarna mobile app bug let users log into other customers' accounts

Klarna mobile app bug let users log into other customers' accounts
2021-05-27 15:22

Klarna Bank suffered a severe technical issue this morning that allowed mobile app users to log into other customers' accounts and see their stored information.

Today, customers reported that when they logged into the Klarna mobile app, they were showed the account information for other users instead of seeing their own accounts.

After Klarna learned about the technical issue, they took their mobile app offline, which now shows a message stating, "Sorry, the Klarna app is currently down for maintenance."

"This is why we are sad and frustrated to inform you of a self-inflicted incident, that for 31 min affected up to 0.1%, approximately 90 000, of our users.The bug led to random user data being exposed to the wrong user when accessing our user interfaces," Klarna said in a statement about the mobile app bug.

While Klarna states that the bug exposed only non-sensitive data, users report that this is not accurate.

To make matters worse, Klarna customers state that each time they logged into the mobile app, they would get access to a different account.


News URL

https://www.bleepingcomputer.com/news/security/klarna-mobile-app-bug-let-users-log-into-other-customers-accounts/