Banks sued over mobile app breach

Three businesses have been sued by an consulting firm in Udon Thani after supposedly losing 2 million baht 30 hours after a cellular banking software it was using was hacked, according to an accounting firm in the city.

On-anong Bunto, 57, a part of the firm’s table, met Pol Lt Kitiphum Akkhawithayanukul, assistant chief inspector of Udon Thani’s Muang authorities, on Thursday. She lodged complaints against three institutions, accusing them of violating the Bank of Thailand’s safety procedures.

Ms. On-anong claimed that the company had opened five accounts with various businesses with mobile finance programs. On Dec 22, but, the company may not perform trades via one of its records as it was locked, she said.

The company later discovered that scammers had hacked into three accounts, including one that was used to make income payments to the firm’s employees.

Ms On-anong said the offenders transferred 49, 999 ringgit in individual purchases from each bill. Within 30 hours of the account breach, everything happened.

In the first bill, a full of 199, 999 ringgit was stolen through four 49, 999 ringgit payments. The same amount was taken out of the following bank account by four additional payments. In the last consideration, the defendants took a total of 1, 999, 999 ringgit through 40 payments.

Ms. On-anong claimed that the three banks that registered the accounts did not inform the business of the illegal withdrawals.

She claimed that the business had taken the necessary steps to notify the lenders. The banks that controlled the first and second accounts, she said, insisted they had noticed uncommon transactions and had frozend them after attempting to withdraw the money again.

However, the lender that opened the second account did not stop the withdrawals until the police prompted them, she claimed. The company’s staff, she said, disobeyed the firm’s requests to respond to its inquiries or write a complaint. They also refused to give advice on how to recover the money.

The banks that held the final account is a juristic person, which made it difficult to change the account owner’s information, she claimed.

The three businesses have been accused of failing to notify the business, and the business has filed a complaint with them. Another lawsuit was brought against the second lender.