A security flaw in HSBC's online banking system has left over three million customers' accounts dangerously vulnerable to outside attack from hackers. On August 9, 2006 a research team from Cardiff University discovered the flaw and alerted HSBC. Hackers are able to access accountholders' finances within nine attempts. Hackers can use remote programs to hijack a user's machine and make records of the keystrokes as they type. The security flaw has been active for at least two years.
After the security flaw was discovered in HSBC's online banking system, experts warned that bank customers using the internet are increasingly at risk from an array of sophisticated scams.