Skånetrafiken customers have had hacked accounts

Skånetrafiken discovered Sunday a computer flaw of the service called My account. With the help of lists transferred elsewhere, someone made thousands of login attempts and managed to log on to the accounts of 17 clients.

"We discovered that there was exceptionally high traffic and exceptionally high traffic that could not get in, just a fraction, which indicates that you have access to a list received elsewhere and then tested the list. of our services, so we managed to access the account of 17 of our customers, "said Johan Karlberg, head of digitization and computing at Skånetrafiken.

The affected customers have been informed and the accounts are protected. The event was reported to the data inspection and the police.

– The first thing we did was reset their accounts so that they needed a new password. We sent them a message and called them. I do not think we have everyone, but we left a message to everyone. If you do not hear from us, you have not been affected.

He says that Skånetrafiken is serious about it.

– This is always serious when someone accesses an account or information to which he should not have access. This is what makes people afraid to use different services.

What information can you access from my Skånetrafiken account?

– It depends on the number of users having entered the account, it can be an email, a phone number and, depending on what was written, it can act of the social security number and the address. You can see if you have saved jojo cards in the application and which tickets are linked to the account.

Johan Karlberg says that such a route can not be accessed, for example, with credit card data.

– The information is available from a payment service provider and we do not have access to this data yourself.

He says it's the first time, what he knows, since Skånetrafiken has been hit by computer scams this way. There are ways to make things difficult for hackers.

– We encourage people to think about changing their password from time to time and not using the same password on different services. It's as if the user in this way had the greatest opportunity to influence security. Then we work with our suppliers to find the safest solutions. We sometimes try to try our systems and try to hack them, which we have not done yet.