
Lycamobile agent sent my 2-year-old password in plain text! 🚩
Hey everyone, just a massive security warning for anyone using Lycamobile.
I was on a phone call with one of their customer support agents today.
I simply told the agent that I was logging into my account. I did not ask for a password reset or a reminder at all.
Without me asking, the agent triggered a "send password" email to my inbox. The crazy part?
The email contained my exact password that I set 2 years ago, fully visible in plain text.
This is a huge security red flag. It proves they are storing our passwords completely unencrypted on their servers for years.
Any secure company encrypts passwords so even their own staff cannot see them or send them to you.
What you need to do:
If you use your Lycamobile password for any other website or app, please change those immediately. Stay safe out there!