{"id":337967,"date":"2017-04-10T15:26:42","date_gmt":"2017-04-10T07:26:42","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1474723"},"modified":"2017-04-10T15:26:42","modified_gmt":"2017-04-10T07:26:42","slug":"pay-day-loan-firm-wonga-suffers-data-breach-affecting-up-to-270000","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/pay-day-loan-firm-wonga-suffers-data-breach-affecting-up-to-270000\/","title":{"rendered":"Pay day loan firm Wonga suffers data breach affecting up to 270,000"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/screen-shot-2017-04-10-at-9-14-03-am.png?w=738\" class=\"\"\/><\/p>\n<p>Payday loan firm <a target=\"_blank\" href=\"http:\/\/www.wonga.com\">Wonga<\/a>\u00a0has suffered a data breach affecting up to 245,000 customers in the UK. A further 25,000 customers in Poland may also be affected, according to the <a target=\"_blank\" href=\"http:\/\/www.bbc.com\/news\/business-39544762\">BBC<\/a>.<\/p>\n<p>A <a target=\"_blank\" href=\"https:\/\/www.wonga.com\/help\/incident-faq\">notification<\/a>\u00a0on Wonga\u2019s\u00a0UK website currently warns of\u00a0\u201cillegal and unauthorised access to limited personal data\u201d, and says affected customers have been emailed about the breach.<\/p>\n<p>According to an <a target=\"_blank\" href=\"https:\/\/www.wonga.com\/help\/incident-faq\">FAQ page on its website<\/a>\u00a0the types of personal data that\u00a0may have been compromised\u00a0includes names, email addresses, home addresses, phone numbers, the last four digits of bank\u00a0card numbers (but not the whole number) and\/or bank account numbers and sort codes.<\/p>\n<p>It says it does not believe customers\u2019 Wonga account passwords were compromised but suggests concerned users change their\u00a0password anyway.<\/p>\n<p>Wonga is\u00a0warning affected customers to be \u201cextra vigilant\u201d and to alert their bank of potential risk \u2014 though it is says it will also be contacting financial institutions about the breach.<\/p>\n<p>Given that the last four digits of bank cards can use as\u00a0part of the login process for online accounts there\u2019s a potential risk that breached data could be used to try to log into customers\u2019 bank accounts.<\/p>\n<p>We\u2019ve reached out to Wonga with questions and will update this story with any response. <strong>Update:<\/strong> In a statement a spokesperson for the\u00a0company told us: \u201cWonga is urgently investigating illegal and unauthorised access to the personal data of some of its customers in the UK and Poland. We are working closely with authorities and we are in the process of informing affected customers. We sincerely apologise for the inconvenience caused.\u201d<\/p>\n<p>There are no details about\u00a0how the breach happened at this point, with Wonga saying only on its website that it is\u00a0\u201curgently working to establish further details\u201d, and making a\u00a0generic statement about the rise of \u201cincreasingly sophisticated\u201d cyber\u00a0attacks.<\/p>\n<p>According to the <a target=\"_blank\" href=\"https:\/\/www.theguardian.com\/business\/2017\/apr\/09\/wonga-data-breach-could-affect-250000-uk-customers\">Guardian<\/a>, the company became aware of a problem last week but only realized on Friday that data could be accessed externally, and only started contacting affected customers on Saturday. The UK\u2019s data protection regulator, the ICO, has apparently been informed of the breach.<\/p>\n<p>New <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2015\/12\/16\/gdpr-agreed\/\">European Union-wide rules on data breaches<\/a>\u00a0coming into force in May 2018 will require companies to swiftly (within 72 hours) notify data protection authorities of data breaches involving financial information \u2014 with fines of up to \u20ac10 million or 2 per cent of a company\u2019s\u00a0global turnover for failures of compliance.<\/p>\n<p>This is by no means the first time Wonga has attracted\u00a0negative headlines. Back in <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2014\/10\/02\/wronga\/\">2014<\/a>\u00a0the company\u00a0had to write down $340 million in unpaid loans, following an\u00a0investigation by the UK\u2019s Competition and Markets Authority over its lending practices. It\u00a0was also fined by the regulator\u00a0for\u00a0<a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2014\/06\/25\/wonky-talking\/\">sending fake lawyers\u2019 letters to customers in arrears<\/a>.<\/p>\n<p>Although Wonga\u00a0attracted substantial <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2014\/10\/03\/investors-stay-silent-after-wonga-fiasco\/\">tech investment<\/a>\u00a0for a real-time automated decision-making platform for affordability checks, it\u00a0ended up having to\u00a0write off the loans of\u00a0330,000 customers, and waive the interest and fees for a further 45,000 \u2014 raising questions about the efficacy of its\u00a0algorithms.<\/p>\n<p>Tightened\u00a0criteria on short term loans\u00a0by the UK financial regulator ultimately shrunk the size of Wonga\u2019s\u00a0business, which saw losses double in 2015 \u2014\u00a0to \u00a380.2M.<\/p>\n","protected":false},"excerpt":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"680\" height=\"395\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/screen-shot-2017-04-10-at-9-14-03-am.png?w=680\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/screen-shot-2017-04-10-at-9-14-03-am.png?w=680 680w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/screen-shot-2017-04-10-at-9-14-03-am.png?w=150 150w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/screen-shot-2017-04-10-at-9-14-03-am.png?w=300 300w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/screen-shot-2017-04-10-at-9-14-03-am.png?w=768 768w, https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/04\/screen-shot-2017-04-10-at-9-14-03-am.png 1151w\" sizes=\"(max-width: 680px) 100vw, 680px\" \/>&nbsp;Payday loan firm Wonga has suffered a data breach affecting up to 245,000 customers in the UK. A further 25,000 customers in Poland may also be affected, according to the BBC. <a href=\"https:\/\/techcrunch.com\/2017\/04\/10\/pay-day-loan-firm-wonga-suffers-data-breach-affecting-up-to-270000\/?ncid=rss\">Read More<\/a><\/p>\n<div class=\"feedflare\">\n<a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=24Ka9fd3xP0:bS9j3kvV5kU:2mJPEYqXBVI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=2mJPEYqXBVI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=24Ka9fd3xP0:bS9j3kvV5kU:7Q72WNTAKBA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=7Q72WNTAKBA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=24Ka9fd3xP0:bS9j3kvV5kU:yIl2AUoC8zA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=yIl2AUoC8zA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=24Ka9fd3xP0:bS9j3kvV5kU:-BTjWOF_DHI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=24Ka9fd3xP0:bS9j3kvV5kU:-BTjWOF_DHI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=24Ka9fd3xP0:bS9j3kvV5kU:D7DqB2pKExk\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=24Ka9fd3xP0:bS9j3kvV5kU:D7DqB2pKExk\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=24Ka9fd3xP0:bS9j3kvV5kU:qj6IDK7rITs\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=qj6IDK7rITs\" border=\"0\"><\/img><\/a>\n<\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~r\/Techcrunch\/~4\/24Ka9fd3xP0\" height=\"1\" width=\"1\" alt=\"\"\/> <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-337967","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=337967"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337967\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=337967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=337967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=337967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}