In April 2017, Wonga investigated unauthorized access to customer data that could have affected about 270,000 people: approximately 245,000 in the UK and 25,000 in Poland, according to contemporaneous reporting. That was a potential reach, not a confirmed count of records taken. Reports described personal and financial details that might have been accessed, while Wonga reportedly believed account passwords were not compromised.
What happened in the Wonga breach?
On 9 April 2017, ITV News reported that Wonga was urgently investigating unauthorized access and that police and the Information Commissioner’s Office (ICO) had been informed. ITV’s report put the possible reach at about 245,000 UK customers and 25,000 Polish customers.
As an Amazon Associate I earn from qualifying purchases.
MoneySavingExpert reported the next day that Wonga had discovered the possible breach on the Friday, started notifying affected customers on Saturday, and reported the incident to the ICO and police. Its 10 April account described the incident as a potential exposure, not proof that all the listed information had been taken.
Free tools Windows power users keep installed
One-click scans. No signup required.
Was my Wonga data affected?
The reported figures describe people who might have been affected, not a verified list of customers whose records were accessed or extracted. The contemporaneous reports cited here do not establish whether any particular person’s data was taken. If you were a Wonga customer at the time, these reports alone cannot confirm whether your records were involved.
#1 Best Overall
What information might have been exposed?
UK-focused reporting
MoneySavingExpert reported that information potentially accessed included names, email addresses, home addresses, phone numbers, the last four digits of payment cards, and bank account numbers and sort codes. These were categories that might have been involved; the report did not establish that every category was taken for every customer.
Polish customers
CERT Orange Polska’s 2017 incident report said Polish customers had been notified that names, addresses, phone numbers, national identification numbers, and identity-card numbers might be involved. It described a possible leak and noted that Wonga had not confirmed that data was transferred. The CERT report gives a country-specific account; its list should not be combined with the UK-focused reporting as if it were one confirmed dataset.
Were Wonga passwords stolen?
Contemporaneous reporting said Wonga believed account passwords had not been compromised. Ars Technica reproduced wording from the company’s incident FAQ and reported that customers were advised to watch for unusual activity and be cautious about callers seeking personal information. Ars Technica’s 10 April 2017 report is a secondary account of that FAQ, rather than a directly available primary notice.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What should you do if you are concerned about exposed bank details?
- Review account activity. Check bank and payment-card statements for transactions you do not recognize, and contact the relevant provider if you find one.
- Contact your bank if your account details may be at risk. Ask what monitoring or protective steps it recommends for your account.
- Treat unexpected calls cautiously. Do not disclose passwords, one-time codes, or other personal information to an unsolicited caller; use a verified contact route for your bank or lender.
- Stay alert to unusual activity. This was the general customer guidance reported at the time. The sources cited here do not establish a current Wonga breach-response line or service.
What remains unconfirmed?
The reports available for this incident do not establish how the unauthorized access occurred, how many records were ultimately accessed or extracted, or the final regulatory outcome. CERT Orange Polska specifically noted that Wonga had not confirmed data transfer. The reported 270,000 potential reach should therefore not be treated as a confirmed number of stolen records.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
