Loan site buckling under COVID-19 strain shows man another applicant’s data
Form requires sensitive data, including driver’s license and voided check scan. …
reader comments
45 with 38 posters participating
Jay Warren was frantically trying to submit an online loan application under the Paycheck Protection Program (PPP), but the site he was accessing at lendioapply.crossriversba.com/ kept timing out. He says he tried to reload the application some 30 times and still had no luck. When a page finally appeared, he found something even more troubling: he was staring at the application of a stranger who lived 1,200 miles away.
The first page he saw displayed the name, email address, and business phone number of the person. When Warren clicked to the next page, he saw the last four digits of the woman’s social security number and her business address. Knowing that the application required an amount of other sensitive information—including disclosure of any criminal history, average monthly salary, a driver’s license scan, a scan of a voided check, a proof of payroll form, and, optionally, the most recent tax return—Warren stopped there.
“If I had kept clicking on, who knows what I would have seen,” said Warren, who lives in Tucson, Arizona. “I felt weird about it, so I got out of it.”
Warren then called Kelley Jacobs, the Illinois-based woman whose information had appeared on his screen. He told her what had just happened and asked if she had seen his information. She said she hadn’t but that, like him, she had been experiencing maddening website glitches as she was trying to complete her PPP application.
The service facilitating the online loan application process was provided by Lendio, a company that matches borrowers with lenders around the
Continue reading – Article source