Loan site buckling under COVID-19 strain shows man another applicant’s data
Jay Warren was frantically trying to submit an online loan application under the Paycheck Protection Program (PPP), but the site he was accessing at lendioapply.crossriversba.com/ kept timing out. He says he tried to reload the application some 30 times and still had no luck. When a page finally appeared, he found something even more troubling: he was staring at the application of a stranger who lived 1,200 miles away.
The first page he saw displayed the name, email address, and business phone number of the person. When Warren clicked to the next page, he saw the last four digits of the woman's social security number and her business address. Knowing that the application required an amount of other sensitive information-including disclosure of any criminal history, average monthly salary, a driver's license scan, a scan of a voided check, a proof of payroll form, and, optionally, the most recent tax return-Warren stopped there.
"If I had kept clicking on, who knows what I would have seen," said Warren, who lives in Tucson, Arizona. "I felt weird about it, so I got out of it."
Read 10 remaining paragraphs | Comments