Some may not know this but Touch N Go card users can actually obtain the details of their card transactions through a dedicated portal. The company also utilised the portal for its e-Refund service in which users can initiate their refund requests for situations such as incorrect chargers as well as expired, inactive, or lost cards.
Hence, it goes without saying that the portal contained some sensitive information. In addition to the TNG card serial number, here are the information requested by TNG when you register as a new user at TNG Portal:
Now, try to imagine that when you are logged into the portal to obtain the transaction details of your TNG card, you were provided with information that belonged to other users instead. This is apparently what happened earlier today according to Lowyat.NET Forums user Cookie101.
Not only that, but Cookie101 also revealed that TNG Portal showed information that belonged to different users every time a new login session was initiated. In the same thread, several other Lowyat.NET Forums users replied and confirmed Cookie101’s observations.
Only at around 12:25 PM that the TNG Portal went online once again and made it accessible to users. Everything seemed to be in order though at the moment as we were not able to replicate the glitch ourselves after TNG put up the site online again but nevertheless, we are now reaching out to the company for their official comment on this matter.
