throwaway398759375
New Member
- Joined
- Jan 2, 2019
- Messages
- 2
- Reaction score
- 0
Hi all,
I just wanted to inform anyone who is a client for OnePlan that they store their consumers' passwords in plain text.
I wanted to reset my password and after following the instructions they sent me an SMS with the actual password in it. That's right, instead of sending you a link to reset it securely, they just send it straight to you.
Turns out you can only reset the password on the app, so at least that worked.
So if there's ever a data leak from their side, I really hope you don't use that password for other sites.
That is all. Just wanted to inform anyone who uses them. Their insurance itself has been helpful for me so far, but damn their cyber security is bad.
I just wanted to inform anyone who is a client for OnePlan that they store their consumers' passwords in plain text.
I wanted to reset my password and after following the instructions they sent me an SMS with the actual password in it. That's right, instead of sending you a link to reset it securely, they just send it straight to you.
Turns out you can only reset the password on the app, so at least that worked.
So if there's ever a data leak from their side, I really hope you don't use that password for other sites.
That is all. Just wanted to inform anyone who uses them. Their insurance itself has been helpful for me so far, but damn their cyber security is bad.