A university student trying to get information on her Kiwisaver balance was shocked to find ANZ had emailed her another person's details.
Cantabrian Sarfia Sparks, 19, filled out an online survey to find out how much more money she needed to contribute in order to get the maximum government tax credit to her savings scheme.
The automatic response email showed the name, investor number, and minimum contribution figure of a different customer. Thinking she had filled in the wrong details, she tested it using her mother's investor number.
It once again sent her mother the details of someone else. The name was so unique they could be easily identified, she said.
The Otago University student was concerned it was insecure, and too easy to "hack" into another person's details.
"It's a flaw in their system that needs to be altered, maybe with an extra security question. I just think it's too easy for someone to figure out how much you earn. How many other people have got the wrong information?"
An ANZ spokesman told The Press there was no sensitive information in the email and nothing that identified a customer or revealed their financial situation.
Based on the complaint, ANZ was making enhancements to exclude surnames from emails.
- The Press
Do you care about mass surveillance?Related story: What Christchurch thinks of spy revelations
• Newsroom 03-943 2827 or email firstname.lastname@example.org
• Classified Ads: 03-3778778 or email email@example.com
• Display and Online Ads: 03-3648285 or email firstname.lastname@example.org
• General inquiries: 03 379 0940
• Subscribe to The Press
• Deliveries, subscriptions, holiday stop/starts: 03 364 8464, or email: email@example.com
• No paper or holiday stop/starts: action online
• Buy a photo
• Newspaper subscribers - register for the digital edition
• Make press.co.nz your homepage
Read Press extras for Avenues, fashion, home design and weddings
Births, weddings, engagements
Death notices and in memoriam