Customers of three major UK banks experienced a significant data breach Thursday morning when mobile banking apps allowed users to see other people's account information. Lloyds, Halifax, and Bank of Scotland customers reported viewing account details, transaction histories, and personal data including national insurance numbers belonging to strangers.
The incident represents a serious privacy violation affecting millions of customers across the three banks, all part of the Lloyds Banking Group. Banking apps have become essential financial tools for most UK consumers, making such security failures particularly concerning for public trust in digital banking infrastructure.
The banks have not disclosed how many customers were affected or the duration of the exposure. Customer reports indicate the breach occurred during morning login attempts, with some users unable to access their own accounts while others gained unauthorized access to foreign account data.
The incident raises questions about cybersecurity protocols at major financial institutions and potential regulatory responses. Customers affected by the breach may face identity theft risks, while the banks could face substantial fines from UK financial regulators and potential legal action from impacted account holders.