Lloyds Banking Group Hit by Technical Glitch Exposing Customer Data
On the morning of March 12, 2026, customers of Lloyds, Halifax, and Bank of Scotland reported a serious technical issue in their mobile banking apps. Users were shown other customers’ account details, including names, sort codes, spending histories dating back to December, and unfamiliar transactions.
Lloyds Banking Group acknowledged the incident as a "technical glitch" and stated that no unauthorized access or financial theft occurred. The bank assured customers that account balances remained accurate and advised logging out and back in to resolve the issue, which worked for many. However, some users continued to experience problems as investigations proceeded.
Despite the bank’s reassurances, the brief exposure of sensitive data sparked privacy concerns. Social media reactions highlighted frustration, with one user, Matt Doogue, calling it a "huge data breach" after seeing transactions from other accounts. The incident underscores the risks of technical failures in digital banking systems.
Source: https://www.finextra.com/newsarticle/47428/lloyds-bank-user-served-with-strangers-accounts
Halifax cybersecurity rating report: https://www.rankiteo.com/company/halifax
Lloyds Banking Group cybersecurity rating report: https://www.rankiteo.com/company/lloyds-banking-group
"id": "HALLLO1773312505",
"linkid": "halifax, lloyds-banking-group",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Customers of Lloyds, Halifax, '
'and Bank of Scotland',
'industry': 'Banking',
'name': 'Lloyds Banking Group',
'type': 'Financial Institution'}],
'customer_advisories': 'Log out and back in to resolve the issue; account '
'balances remain accurate',
'data_breach': {'data_exfiltration': 'No evidence of data exfiltration',
'personally_identifiable_information': 'Names, sort codes, '
'transaction histories',
'sensitivity_of_data': 'High (personally identifiable and '
'financial information)',
'type_of_data_compromised': 'Account details, names, sort '
'codes, spending histories, '
'transactions'},
'date_detected': '2026-03-12',
'date_publicly_disclosed': '2026-03-12',
'description': 'On the morning of March 12, 2026, customers of Lloyds, '
'Halifax, and Bank of Scotland reported a serious technical '
'issue in their mobile banking apps. Users were shown other '
'customers’ account details, including names, sort codes, '
'spending histories dating back to December, and unfamiliar '
'transactions. Lloyds Banking Group acknowledged the incident '
"as a 'technical glitch' and stated that no unauthorized "
'access or financial theft occurred. The bank advised '
'customers to log out and back in to resolve the issue, though '
'some users continued to experience problems.',
'impact': {'brand_reputation_impact': 'Negative social media reactions; '
'privacy concerns raised',
'customer_complaints': 'Frustration and privacy concerns reported '
'on social media',
'data_compromised': 'Customer account details, including names, '
'sort codes, spending histories, and '
'transactions',
'identity_theft_risk': 'Potential risk due to exposure of '
'personally identifiable information',
'operational_impact': 'Customers experienced incorrect account '
'details; some resolved by logging out and '
'back in',
'payment_information_risk': 'Potential risk due to exposure of '
'transaction details',
'systems_affected': 'Mobile banking apps (Lloyds, Halifax, Bank of '
'Scotland)'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Incident report and social media reactions'}],
'response': {'communication_strategy': 'Public acknowledgment of the issue; '
'reassurance that no unauthorized '
'access occurred',
'containment_measures': 'Customers advised to log out and back '
'in to resolve the issue'},
'title': 'Lloyds Banking Group Technical Glitch Exposing Customer Data',
'type': 'Technical Glitch / Data Exposure'}