Sprint customers say a glitch exposed other people’s account information

Several Sprint customers have said they are seeing other customers’ personal information in their online accounts.

One reader emailed TechCrunch with several screenshots describing the issue, warning that they could see other Sprint customers’ names and phone numbers. The reader said they informed the phone giant of the issue, and a Sprint representative said they had “several calls pertaining to the same issue.”

In all, the reader saw 22 numbers in a two-hour period, they said.

Several other customers complained of the same data exposing bug. It’s unclear how widespread the issue is or for how long the account information leak persisted.

Logged in to pay my @sprint bill, saw what looked like the details of another user. Did this 3 times. I called, rep said they’d been getting other similar calls. Advice on clarifying if this is the privacy breach it looks like? @EFF @publiccitizen @NCLC4consumers @eyywa

— Kylie B-C (@notthatkylie) March 14, 2019

I was just able to access a bunch of random peoples Sprint bill information when trying to check my own. Holy major security breach! @sprint

— Cody Rose (@cody_rose) March 19, 2019

@sprint are you having a known issue with your website?! I’m trying to set permissions on my account and some other damil’s information is on my account!

— Thelma Cheeks (@Tcheeksiamhair) March 19, 2019

If you are a @sprint customer please be aware that there has been a data breach. I have logged on to my account twice and both times have seen other customers’ devices. A phone call with @sprintcare resulted in them hanging up on me.

— Madeline Finch (@themadfinch) March 19, 2019

Another customer told TechCrunch how the Sprint account pages were initially throwing errors. The customer said they scrolled down their account page and saw several numbers that were not theirs. “I was able to click each one individually and see every phone call they made, the text messages they used, and the standard info, including caller ID name they have set,” the customer told TechCrunch.

Of the customers we’ve spoken to, some are pre-paid and others are contract.

We’ve reached out to Sprint for more but did not hear back. We’ll update when more comes in.

Dow Jones’ watchlist of 2.4 million high-risk individuals has leaked