Bug report
This is a bug report concerning website issues. Please forward it to the people in charge. You can contact me when the issue is solved, but NOT BY PHONE. There is a minor flaw on your website, Personal Internet Banking, and it is in the customer interest to hear about, so if it is not solved in less than a month it will be made public, with all the consequences.
We have two accounts on the HSBC “Personal Internet Banking” website and we log in on the same computers. This is how we noticed that one of us has access to the other’s account without proper authorization.
Typical scenario:
1. User 1 logs in on the HSBC Personal Internet Banking.
2. User 1 closes the browser window without logging off.
3. User 2 opens the login page for Personal Internet Banking, types her/his username in the first page.
4. User 2 is erroneously directed to User 1’s account.
Expected behavior: at step 4, User 2 should be prompted for his/her password.
Using Firefox 2.0.0.3 (latest), Windows XP.
Once again, please do not call.
Three days later, a response:
Dear Ms. (sic!) Sandor:
Thank you for contacting HSBC Bank USA, N.A., the world’s local bank.
Keeping your banking and financial information safe and secure is of paramount importance. HSBC pledges to continue its efforts to maintain the highest level of online security for its customers.
You also play a critical role in keeping your personal information protected. Please review each section of HSBC’s Security Site and become familiar with the measures HSBC takes to protect your online information, and the steps you can take to help secure your online experience. You can view the Security Site information by visiting the website address listed below. Also, we have included the details pertaining to logging off after each Internet Banking
session.
http://www.us.hsbc.com/1/2/3/personal/inside/securitysite/alerts
1. Go to ‘us.hsbc.com’.
2. Under online account access on the right side, select ‘Security Site’ in blue.
3. On the left menu click ‘Your Responsibility’.
4. Select ‘Keep Your Internet Banking Session Secure’.
Our Customer Relationship Center is always available, 24 hours a day, 7 days a week to meet all of your banking needs. Please e-mail us by clicking ‘BankMail’ in the gray navigation bar on the left or call 1-800-975-HSBC (1-800-975-4722), and speak with one of our professionals.
Sincerely,
Michele xxxxxxx
Internet Banking Specialist