Live Chat transcript contains plain text security details

[time4tea1706]

Hi,

I recently engaged with Live Chat to order a new phone upgrade and supplied answers to security questions which contained SPI. At the end of the chat, I asked for the transcript to be emailed to me which it was, but none of the SPI was obfuscated.

I think that this is something that Vodafone could improve upon, whilst the information maybe secure on your systems as soon as it leaves via smtp it becomes public domain and unless the entire delivery chain is compliant to handling SPI data then that data is at risk.

I think at the very least a warning when you select email transcript should be present.

Thoughts?

Thanks

Guy

[BandOfBrothers]

Good feedback @time4tea1706

All posts are read by Vodafone so I'm sure they'll pass this back. 

[Retired-Sarah_A]

Hi @time4tea1706

We will pass this information on.

Thanks,

Sarah