Banking update glitch allowed users to view each other’s accounts

Update bug in Arkansas-based Arvest Bank systems exposed customer data, allowing users to peek into accounts they do not own.

While data leaks usually involve third parties going places they‘re not supposed to, private data can get exposed in less nefarious ways. Take Arkansas' oldest bank, Arvest. According to the company‘s recent breach notification letter, thousands of its customers were exposed over an update gone awry.

A systems update glitch, the bank calls “brief technical issue,” allowed some customer accounts to be viewed by another customer during an online banking session. Details Arvest submitted to the Office of the Maine Attorney General reveal that over 7,500 individuals were impacted by the incident.

The update-gone-sour exposed sensitive user details, including:

• First and last names
• Account numbers
• Account balances
• Account activity

Leaked details could cause privacy issues to individuals involved, as malicious actors could utilize data to carry out targeted phishing attacks and use spending patterns to tailor fraud. The bank could also become a victim as attackers might pose as legitimate customers, attempting to obtain even deeper access to users‘ accounts.

However, to prevent damage to its customers, Arvest said it disabled some online banking functions until the issue is fixed. Additionally, the bank said it will provide impacted individuals with credit monitoring and identity theft recovery services.

Established in 1871, Arvest has over 200 locations with assets exceeding $26 billion. The bank's primary owners are the Walton family, one of the wealthiest families in the world, whose ancestors established retail giant Walmart.