[Resolved][Severity: Major][Credential abuse]

Lifecard: unauthorized access to the V-Preca prepaid card app led the company to suspend the app

Several password list attacks were seen, and the company suspended the app from December 9 to protect user accounts. The web service stayed available.

Disclosed

2020-12-08

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-12-08
The company announced unauthorized access to the app of V-Preca, its online-only Visa prepaid card. [2] [3]
2020-12-09
It suspended the app service because user account protection could be at risk. [1] [2]

Impact and response

Several password list attacks, which try IDs and passwords leaked from outside services, were confirmed. The company is working to trace the source and defend, and asked users not to reuse a password across services. The web service stays available. [1] [2] [3]