Quote:
Originally Posted by KnowItAll  PDLM - trust you to believe everything that HSBC says.
Only their IT folks and Insurance people would know the truth... |
Indeed - but if the server was entirely unprotected I can't believe HSBC would be stupid enough to say that it had "multiple layers of security which are reviewed regularly" since the reputation cost of someone then producing the list of names would be immense. (Even though in practice they couldn't do much with it.)
And frankly there are thousands of people in Hong Kong and elsewhere who trivially have access to my name, address, bank account and credit card details (being all the customer service, accounts and other people in the organisations who have access to my accounts everywhere that I pay bills or shop). Again, if someone wants that information they could either get a job as a customer service rep at one of the organisations, or bribe someone who already is there. This would be far, far easier than cracking security and encryption on a server.