Monzo Bank Limited
- Aliases / services
- Monzo / モンゾ / Monzo Bank Limited
- Official website
- https://monzo.com/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
PIN records for UK Monzo accounts
- Response status
- Not listed
- Response information checked
- 2026-10-29
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29
On 2 August 2019 Monzo found PINs also logged internally in encrypted files. It deleted the records and updated its apps, reporting no external access or fraudulent use.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
The historical notice asked affected users to change their PIN at an ATM. Use the current app and report suspicious activity through in-app chat or the number on the card.
Official service URL
Source URLs
- Operator and company informationhttps://monzo.com/blog/2019/08/05/weve-fixed-an-issue-storing-some-customers-pinsService and operation documentation
Related official sources
- Operator and company informationOfficial information directoryIdentifies Monzo Bank Limited and the stated service scope.
- August 2019 PIN logging issue and fixOfficial information directoryOn 2 August 2019 Monzo found PINs also logged internally in encrypted files.
Comments