Chinanews, October 19th, "Gongxin WeChat" WeChat official account published a message today to remind relevant units, enterprises and individuals to strengthen their awareness of personal information protection.
Recently, some public opinion reports reported that after criminals stolen personal mobile phones, they stole users' personal information from a certain government APP, and then applied for online loan consumption, which caused user property losses.
The Ministry of Industry and Information Technology immediately organized the verification process and interviewed the relevant persons in charge of the telecommunications company involved on October 12.
It is understood that after the user’s mobile phone was stolen, the user’s phone card was not reported in time, leaving room for criminals to take advantage of. The criminals obtained important personal information such as the user’s ID number in a government APP through the weak verification method of "mobile phone number + verification code". The user’s personal information was used to change the mobile phone service password, the telecom company’s customer service staff was used to deceive the phone card to unlink the lost phone card, and the “retrieve user password” vulnerability in some online loan platforms was used to reset the user’s payment password to defraud online loan funds. Eventually cause loss of user property.
In response, the Ministry of Industry and Information Technology required the three basic telecommunications companies to strengthen security protection while facilitating users' handling of services in sensitive links involving user identities such as service password reset and unhooking, strengthen customer service personnel risk prevention awareness training, and be alert to abnormal business handling behaviors.
In addition, the Ministry of Industry and Information Technology recommends relevant units and enterprises to desensitize data in a timely manner, and recommends relevant industries to collect, store, and use user personal information in accordance with the principle of minimum necessity, and to properly store the collected and stored user personal information in classification and classification.
At the same time, the Ministry of Industry and Information Technology also reminds users to set the SIM card password in time, and report the loss as soon as possible after losing the mobile phone to strengthen the awareness of security risks.