Man Realizes He Has Unauthorized Access to Brinks Home Customer Data

EDMONTON — A Brinks Home customer in Canada recently discovered he had access to the account information of roughly 100 customers while attempting to troubleshoot his malfunctioning door sensors.

Andrew Kopp signed into his system’s online portal and noticed he “had a drop-down [menu] to select a whole bunch of addresses,” he told the CBC.

Kopp says he was able to see names, addresses, phone numbers, emergency contacts and account payment history.

He reported the incident to Brinks in early 2022 but noticed that he still had access in April. By the time July rolled around, he still had access and reported the issue again, this time requesting to speak to a manager. He was promised a manager would call him back but he never received a call.

Ultimately, by mid-September, Kopp saw that the issue seemed to be fixed after sending the company an email. He estimates he was able to access other customers’ data for seven to 10 months.

When reached for comment on the story, Brinks told SSI, “Brinks Home’s number one priority is ensuring the safety and security of all our customers, and we take the matter of data privacy very seriously. Regarding the issue with the BrinksHome portal, upon receipt of Mr. Kopp’s September 2022 email, the Brinks Home team took immediate action to remediate the situation and resolved this isolated issue within 24 hours with no impact to our service.”

Despite the unintended data breach that lasted nearly a year, Brinks has not notified any of its customers whose data was exposed, saying it conducted a review with both internal and external counsel and determined that the nature of the data that was visible did not require a customer notification.

Brinks says the customer service representative who originally spoke with Kopp in July was from a third-party and did not follow the proper protocols and procedures required by Brinks Home when an escalation is requested by its customers.

“We have since reinforced our protocols and trainings with the representative in question to ensure compliance with our escalation procedures. All Brinks Home customer service representatives go through a rigorous training program, which includes training around data privacy and security. As a company, we remain committed to working hand-in-hand with our customers to resolve any issues or concerns and will continue to do so in the future,” the company says.

Brinks also says that less than .01% of its total customer base had the ability to view the contact information of a small subset of other customers, to its knowledge Kopp is the only customer that accessed other customers’ information and that no financial or banking information was visible as part of this incident.

The company adds that there was also no involvement of third-party actors.

The post Man Realizes He Has Unauthorized Access to Brinks Home Customer Data appeared first on Security Sales & Integration.



from News Archives - Security Sales & Integration https://www.securitysales.com/news/unauthorized-access-brinks-home-customer-data/
via IFTTT

Comments

Post a Comment

Popular posts from this blog

Total Tech Summit Puts Call Out for Top Integrators to Apply Now

Image
FRAMINGHAM, Mass. — Total Tech Summit announces that applications are now being accepted to attend this year’s event. Comprised of the  SSI Summit, CE Pro Summit and Commercial Integrator Summit, this year’s event will take place in Las Vegas at the MGM Grand Hotel and Casino, Nov. 13-15. At this all-expense-paid, exclusive event, VIP guests will have the chance to sit in on industry-defining sessions, key boardroom presentations, and be able to meet one-on-one with potential vendors. Total Tech Summit brings together the best in class to share ideas, learn from others, and most importantly, accelerating the next stage of their businesses. It is the only event of its kind that bridges channels and connections by bringing together professional security, commercial AV and residential AV integrators. Another perk of the Total Tech Summit is the VIP Peer-to-Peer groups. These group conversations take place throughout the months leading up to the event and are guided by the editors of t
Read more

Evolv Technology, Pittsburgh Pirates Team Up for Fan-Friendly Ballpark Security

Image
WALTHAM, Mass.—Evolv Technology has announced its partnership with Major League Baseball’s Pittsburgh Pirates, adding to the growing list of Pittsburgh, Pa. venues that have teamed up with Evolv to help keep people safe, including the Pittsburgh Cultural Trust and Acrisure Stadium, home of the Pittsburgh Steelers. When the Pirates opened the gates at PNC Park for the 2023 MLB season in early April, all attending fans passed through Evolv’s state-of-the-art Evolv Express screening solution, which uses sensor technology with artificial intelligence (AI) to provide safer, more accurate threat detection at unprecedented volume and speed, the company states. Fans can now walk through without always having to stop or open bags, reducing long lines and allowing guests to make their way directly into the ballpark. “What continues to make PNC Park so special, aside from the physical design, is the total fan experience. That begins from the moment they walk up to our gates,” said Travis Willi
Read more

Minnesota AG Calls for Cancellation of Home Security Contracts for Alleged Fraud

STEARNS COUNTY, Minn. — Bring Me the News reports that Minnesota’s Attorney General, Keith Ellison, says he’s gotten consumers in Stearns County out of home security contracts after they were misled by a door-to-door salesman. According to the report, Ellison’s office announced that home security companies Skyline Security Management and Safe Home Security have agreed to their cancel contracts with customers in and around Stearns County who purchased their systems from door-to-door salesman Gary Harvey. “Door-to-door salesmen and their employers are in the business of trust-building,” Ellison said in a statement. “They know they need to have your trust to sell you their products, particularly expensive products like security systems that are supposed to keep your home safe. When that trust is betrayed, it’s emotionally and financially painful. I appreciate Skyline and Safe Home taking the right step in canceling these contracts while my office does what we can under the law to hold M
Read more