Image via payzone.ie
I may have identified a possible security weakness with the 3V.ie (online customer account) service. This occurred recently while trying to retrieve my own 3V account details, this weakness would allow any person with prior knowledge that you have a 3V account coupled with your mobile phone number to access your 3V “Online Customer Service” browse your balance & purchase history etc. Here is a summary of user tasks taken from their website:
Online Customer Service
Sign on to the new Online Customer Service section of this 3V website using your email address and personal password to:
- Receive again the security details for any Voucher.
- Check the balance and transaction history on your 3V Vouchers.
- Redeem money left on your 3V Vouchers to your bank account.
- Transfer money from one Voucher to another Voucher.
- Request a replacement 3V Customer Card.
- Update your personal details or password.
- Change how you receive the security details when you buy a 3V Voucher.
You can also find the balance and transaction history for any 3V Vouchers quickly by clicking on the View Transaction History link on the left hand side of this page.
+Kieran McCarthy