Npower has permanently withdrawn its mobile app after hackers used it to access its customers’ personal details, including the sort codes and the last four digits of their bank accounts.
The hack, which cybersecurity experts said left the firm’s customers “wide open to fraud”, is understood to have taken place around the start of February.
The company declined to say how many of its gas and electricity customers are affected by the breach, but said it had contacted them.
It’s the latest setback for Npower’s parent company E.ON which took it over in 2019 and has been migrating over what’s left of the 3.6 million customers it inherited.
Source: The Guardian