Paranoid or keep pushing: USAA Account Typo
Source Reddit Cybersecurity
Discussion
A Reddit user reports receiving sensitive USAA account emails intended for another person due to a typo in the email address used during account signup. Despite multiple notifications to USAA, the issue persists for months, exposing account notifications and changes to an unintended recipient. No evidence of exploitation or malicious activity is reported.
r/cybersecurity (opens in a new tab)u/barryfreed0 points0 comments
So I have a very common name and I'm old.
That means I have a [first.last@gmail.com](mailto:first.last@gmail.com) address. I remember when AltaVista was the jam.
Anyway, having people either fat finger or forget that their actual email address is [first.last1234556@gmail.com](mailto:first.last1234556@gmail.com) and they sign up for stuff happens all the time.
CUT TO:
Someone signs up to be a USAA member. They sign up and I start getting their emails saying they've signed up, a card is on their way, they've changed beneficiaries.....anything you'd get if you signed up for a bank account.
So I called. Let them know that Private Freed used the wrong email address. I'm getting all their account info. They were super thankful. Nothing happened.
Weeks went by. I called again thinking if I'm Private Freed, I wonder why I'm getting none of the notifications. I call again. More "thank you for going above and beyond. We'll fix it."
Nope. Months later and I get every change. Account notifications. Balances (not with numbers).
Just trying to be a good citizen and after 4 calls in total I wonder if it's even worth it. Should I just stop it?
I said Private Freed since my account is barryfreed. It's not that.