HelloMobile customers are currently dealing with a critical security issue. This was discovered by a user, who posted his discovery on Reddit.
The issue stems from a security bug in an app that allows other people to get a user’s information. According to the poster: “Everybody who knows your HelloMobile number can get info about you.” The information they can access include the following:
First and last name
Home address
History of phone calls (from/to)
History of text messages (from/to)
HelloMobile account number (used for porting)
What’s worse about this is that an attacker can simply install the app on any Android device without the need for a HelloMobile SIM card and enter the number into the input field. No password will be asked as well.
Back in February, the poster already informed HelloMobile and the app developer about the security bug he discovered. But after checking yesterday, the poster discovered that it has not yet been addressed.
The poster encouraged other readers and HelloMobile users to send an email to support to ask them to address this critical security issue right away. You can do so by sending an email to support@hellomobile.com and support@mymobileaccount.com.
