Bank is sending private data plain text

Bank is sending PII in plain text in communications including email and sms text messages. The data includes social security number along with the username for login to the State Department of Revenue website.

It's coming to me as presumably the transaction id number or a tracking number of some sort that is how they are receiving it from the DOR itself.


With that specific information i can go to that website, click forgot password. It will ask me for …

bank coming communications data department email login messages pii plain text privacy private private data revenue security sms social social security social security number sort state state department text text messages tracking transaction transaction id username website