Monday 30 March 2026Afternoon Edition

ZOTPAPER

News without the noise


Cybersecurity

Lloyds Banking Group Apps Show Wrong Customer Transactions in Major Data Mix-Up

Account holders at three UK banks saw names, salaries, and child benefit payments belonging to other customers

Zotpaper2 min read
Customers of three major UK banks under the Lloyds Banking Group woke on Thursday to find incorrect transactions appearing in their apps, with some account holders seeing names, salaries, and child benefit payments that were not their own.

The problem, which Lloyds attributed to a technical glitch, affected customers across the group's brands. While not a cyberattack, the incident exposed sensitive financial data belonging to other customers — including employer names, salary amounts, and government benefit payments.

The glitch highlights the fragility of banking infrastructure and the potential for data exposure even without malicious intent. Customers who noticed unfamiliar transactions reported confusion and concern about whether their own data had been similarly exposed to strangers.

Lloyds Banking Group confirmed the issue was caused by a technical error and said it was working to resolve the problem. The group has not disclosed how many customers were affected or the root cause of the data mix-up.

Analysis

Why This Matters

Even without a hack, a simple technical glitch can expose highly sensitive financial data. This raises questions about data isolation practices in banking systems.

Background

Lloyds Banking Group operates several UK banking brands and serves millions of customers. Banking app glitches have become more frequent as institutions digitise their services.

Key Perspectives

The exposure of salary and benefit payment data is particularly sensitive as it reveals employment status and income levels. Regulators may investigate whether adequate data separation controls were in place.

What to Watch

Whether the UK FCA launches a formal investigation and whether affected customers pursue complaints about the data exposure.