Hackers are using the Starbucks smartphone app to take money from customer credit cards, bank accounts and PayPal accounts.
The app lets people pay for drinks and food using their mobile phone if their account is linked to an online payment service.
But hackers have found a way to get into the app and take advantage of the cash auto-reload function and online gift cards that many customers use.
The hackers can then transfer customer funds to themselves.
Starbucks has acknowledged the problem but said there is no flaw in the app, and weak passwords could be to blame.
However it says customers will not be held responsible for any charges they did not make.
The issue - which has seen up to hundreds of dollars syphoned from accounts - appears to be confined the US.
Customers affected received repeated emails telling them that there was a financial problem, but they were unable to stop the transfers.
Starbucks said in a statement: "If a customer believes their account has been subject to fraudulent activity, they are encouraged to contact both Starbucks and their financial institution immediately.
"Customers are not responsible for charges or transfers they did not make. If a customer's Starbucks Card is registered, their account balance is protected."
Consumer rights experts recommend changing the password for the app, and disabling the auto-reload feature.
No comments:
Post a Comment