A 3rd Party suppler was phished to gain access.
Leaked info
- Name
- Address
- IBAN number
- Portfolio Data
- Credit card details if used
Also if you ask too many questions on twitter you get blocked by them. They will give out snarky reply if you ask about bank details I got "No they don't know your passwords and bank details... Did you ever give your banking login to us? I don't think so.". I also asked about ID I got some nonsense about we don't store social security numbers???.
They also think its not an issue to have personal IBAN made public. While there shouldn't be a threat to losing funds in a perfect world it has put my account and others at risk. With names and addresses combined with IBAN you have 90% of the details needed. IT would take little effort to fool someone to steal funds here in the UK its rare to give out those details.
They told us to reset 2FA as a precaution.