- Original Poster
- #1
I was surprised earlier when I phoned Orange about my broadband account that the person on the end of the phone, who I assume is a fairly standard call centre employee, had full details of my account including my password.
It's one of those where they ask for 2 specific characters to confirm identity which I had always assumed was a way to avoid the full password being disclosed on their screen. I actually failed it as it was setup by my ex and I had no idea what it was, but after passing the alternative address/postcode/dob details she was able to tell me the full username and password on the account which is used for online account access.
Another big organisation not only using/storing plaintext passwords but having them readily available to call centre workers who are unlikely to have particularly stringent security checks.
It's one of those where they ask for 2 specific characters to confirm identity which I had always assumed was a way to avoid the full password being disclosed on their screen. I actually failed it as it was setup by my ex and I had no idea what it was, but after passing the alternative address/postcode/dob details she was able to tell me the full username and password on the account which is used for online account access.
Another big organisation not only using/storing plaintext passwords but having them readily available to call centre workers who are unlikely to have particularly stringent security checks.
Last edited:
