SoylentNews
SoylentNews is people
https://soylentnews.org/

Title    No Password Required: Mobile Carrier Exposes Data for Millions of Accounts
Date    Tuesday April 13 2021, @10:04AM
Author    Fnord666
Topic   
from the save-money,-get-pwned dept.
https://soylentnews.org/article.pl?sid=21/04/13/0031248

upstart writes in with an IRC submission:

No password required: Mobile carrier exposes data for millions of accounts:

Q Link Wireless, a provider of low-cost mobile phone and data services to 2 million US-based customers, has been making sensitive account data available to anyone who knows a valid phone number on the carrier's network, an analysis of the company's account management app shows.

Dania, Florida-based Q Link Wireless is what's known as a Mobile Virtual Network Operator, meaning it doesn't operate its own wireless network but rather buys services in bulk from other carriers and resells them. It provides government-subsidized phones and service to low-income consumers through the FCC's Lifeline Program. It also offers a range of low-cost service plans through its Hello Mobile brand. In 2019, Q Link Wireless said it had 2 million customers.

The carrier offers an app called My Mobile Account (for both iOS and Android) that customers can use to monitor text and minutes histories, data and minute usage, or to buy additional minutes or data. The app also displays the customer's:

[...] No password required . . . what?


Original Submission

Links

  1. "upstart" - https://soylentnews.org/~upstart/
  2. "No password required: Mobile carrier exposes data for millions of accounts" - https://arstechnica.com/information-technology/2021/04/no-password-required-mobile-carrier-exposes-data-for-millions-of-accounts/
  3. "Q Link Wireless" - https://qlinkwireless.com/
  4. "Lifeline Program" - https://www.fcc.gov/general/lifeline-program-low-income-consumers
  5. "Hello Mobile" - https://hellomobile.com/
  6. "said" - https://markets.businessinsider.com/news/stocks/south-florida-based-hello-mobile-beats-nationwide-prepaid-prices-1028340029
  7. "iOS" - https://apps.apple.com/us/app/my-mobile-account/id1408895511
  8. "Android" - https://play.google.com/store/apps/details?id=com.qlink.myqlink
  9. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=48693

© Copyright 2024 - SoylentNews, All Rights Reserved

printed from SoylentNews, No Password Required: Mobile Carrier Exposes Data for Millions of Accounts on 2024-03-28 19:07:13