You've been redirected from MobilePaymentsToday.com to PaymentsDive.com. In March 2021, Mobile Payments Today became a part of Payments Dive. For the latest payments news, sign up for the daily newsletter.

Hackers exploit Starbucks mobile payment app

The issue goes back as far as December, according to a published report.

Starbucks Wednesday said it is aware that hackers have gained access to some customers' online accounts and stolen funds via the auto-reload function, which links to the customer's credit or debit account. 

Bob Sullivan broke the story on his website. CNN later confirmed that Starbucks had recognized the issue and suggested customers use stronger passwords for their accounts. 

From Sullivan's report:

Maria Nistri, 48, was a victim this week. Criminals stole the Orlando woman’s $34.77 in value she had loaded onto her Starbucks app, then another $25 after it was auto-loaded into her card because her balance hit zero. Then, the criminals upped the ante, changing her auto-reload amount to $75, and stealing that amount, too. All within seven minutes.

CNN reported that this particular issue goes back as far as December when criminals hacked into an account and stole $550. 

It took [Jean] Obando two weeks to get back his $550. He said the incident made him realize Starbucks doesn't seek enough approval from customers before directly accessing their bank accounts.

Starbucks told CNN that all customers who have experienced this type of theft will have their funds reimbursed.