Suspended MP Accounts / Username Access Disabled / 3rd Party Security Breach-Dec 2014
Dec 27, 2014, 10:30 pm
#16
Moderator: Smoking Lounge; FlyerTalk Evangelist
Join Date: Feb 2004
Location: SFO
Programs: Lifetime (for now) Gold MM, HH Gold, Giving Tootsie Pops to UA employees, & a retired hockey goalie
Posts: 28,878
No email for me either and I am unable to log in using any combination of my mp#/email/username and password/pin nor can I log in for goalie-dad, goalie-mom and goalie-sis using their creds (mp#/email/username and pin/password)
Dec 28, 2014, 12:35 am
#18
Moderator: United Airlines
Join Date: Jun 2007
Location: SFO
Programs: UA Plat 1.995MM, Hyatt Discoverist, Marriott Plat/LT Gold, Hilton Silver, IHG Plat
Posts: 66,854
There's an entire thread dedicated to this topic
WineCountryUA
UA coModerator
Dec 28, 2014, 4:22 am
#19
Join Date: Jun 2005
Posts: 4
Better check your PayPal account
Here's the full email. I actually took the email to mean they had detected that someone had specifically accessed my account. I also thought I was going to have to change the password via the agent, but all the agent did was re-activate my account so I could quickly login and change everything myself.
Do you use the same user ID (i.e. email address) and password for multiple accounts?
I would strongly suggest you check and change any other accounts where you have used that same login. Many companies won't be sophisticated enough to identify this type of threat. And some may not be as concerned as they should be since it isn't really their system being compromised.
http://mashable.com/2014/09/10/5-mil...asswords-leak/
http://www.dailydot.com/politics/ano...-credit-cards/
http://www.forbes.com/sites/adamtann...e-been-hacked/
Last edited by cosiz; Dec 28, 2014 at 6:04 am
Dec 28, 2014, 8:22 am
#20
Join Date: Jun 2010
Location: Minneapolis, MN
Programs: DL, AA, UA, SPG Gold, HH Gold, IHG Platinum, Marriott Silver
Posts: 471
Here's the kicker..
I have a VERY secure username AND password set on my account, BUT I can't use them! The only thing that works and allows me to login is my MP account # and my super lame 4 digit PIN! I should be able to say allow access via one or the other, but not BOTH or in my case simply the MP/PIN combo since my account/pass don't work anyway. Why am I even able to set them if I can't use them AND you still allow the other to login anyway??
It seems that a number of airlines do this, why is their security SOOOOO crappy??
Ya know, I'm in a mood so I'm going to write them a nice little note!
-Phanto
I have a VERY secure username AND password set on my account, BUT I can't use them! The only thing that works and allows me to login is my MP account # and my super lame 4 digit PIN! I should be able to say allow access via one or the other, but not BOTH or in my case simply the MP/PIN combo since my account/pass don't work anyway. Why am I even able to set them if I can't use them AND you still allow the other to login anyway??
It seems that a number of airlines do this, why is their security SOOOOO crappy??
Ya know, I'm in a mood so I'm going to write them a nice little note!
-Phanto
Dec 28, 2014, 9:51 am
#22
A FlyerTalk Posting Legend
Join Date: Apr 2013
Location: PHX
Programs: AS 75K; UA 1MM; Hyatt Globalist; Marriott LTP; Hilton Diamond (Aspire)
Posts: 56,455
I just got red text stating:
(username and e-mail address sign-on are currently unavailable)
Still able to sign in with MP number and PIN.
(username and e-mail address sign-on are currently unavailable)
Still able to sign in with MP number and PIN.
Dec 28, 2014, 11:17 am
#23
Join Date: Dec 2014
Location: IAH
Programs: UA 1K, Marriott Plat, Global Entry
Posts: 7
No email for me, just same error message as above when I tried to login using my username this morning. Switched to MP# and logged in no problem.
Dec 28, 2014, 12:40 pm
#24
Join Date: Jan 2007
Location: NYC
Posts: 302
I hope this incident serves as a wake-up call for United and that they finally allow some way to disable the 4-digit PIN code entirely. It's absurd in this day and age that such a shoddy security mechanism is in place and enforced.
Dec 28, 2014, 12:57 pm
#25
Join Date: Apr 2014
Posts: 121
I highly doubt it though, but it's worth a shot..
Dec 28, 2014, 1:01 pm
#26
Join Date: Dec 2011
Location: DSM
Programs: UA 1K, AA EP, DL PL, HH Dia, Marriott Gld, National Exp
Posts: 722
Dec 28, 2014, 1:06 pm
#27
A FlyerTalk Posting Legend
Join Date: Apr 2004
Location: GVA (Greater Vancouver Area)
Programs: DREAD Gold; UA 1.035MM; Bonvoy Au-197; PCC Elite+; CCC Elite+; MSC C-12; CWC Au-197; WoH Dis
Posts: 52,140
Since the timing pretty closely corresponds to iDine changing their login system to directly use your MP information, I'd lay odds that's where the breach happened.
It looks like they've disabled access using usernames and email addresses. You have to log in using your MP number.
It looks like they've disabled access using usernames and email addresses. You have to log in using your MP number.
Dec 28, 2014, 1:13 pm
#28
A FlyerTalk Posting Legend
Join Date: Apr 2001
Location: PSM
Posts: 69,232
Or are you suggesting the issue happened on the old iDine platform and this triggered the change?
Dec 28, 2014, 1:19 pm
#29
A FlyerTalk Posting Legend
Join Date: Apr 2004
Location: GVA (Greater Vancouver Area)
Programs: DREAD Gold; UA 1.035MM; Bonvoy Au-197; PCC Elite+; CCC Elite+; MSC C-12; CWC Au-197; WoH Dis
Posts: 52,140
Originally Posted by united.com
(username and e-mail address sign-on are currently unavailable)
Dec 28, 2014, 1:30 pm
#30
FlyerTalk Evangelist
Join Date: Jul 1999
Location: Ewa Beach, Hawaii
Posts: 10,909
Here's the kicker..
I have a VERY secure username AND password set on my account, BUT I can't use them! The only thing that works and allows me to login is my MP account # and my super lame 4 digit PIN! I should be able to say allow access via one or the other, but not BOTH or in my case simply the MP/PIN combo since my account/pass don't work anyway. Why am I even able to set them if I can't use them AND you still allow the other to login anyway??
It seems that a number of airlines do this, why is their security SOOOOO crappy??
Ya know, I'm in a mood so I'm going to write them a nice little note!
-Phanto
I have a VERY secure username AND password set on my account, BUT I can't use them! The only thing that works and allows me to login is my MP account # and my super lame 4 digit PIN! I should be able to say allow access via one or the other, but not BOTH or in my case simply the MP/PIN combo since my account/pass don't work anyway. Why am I even able to set them if I can't use them AND you still allow the other to login anyway??
It seems that a number of airlines do this, why is their security SOOOOO crappy??
Ya know, I'm in a mood so I'm going to write them a nice little note!
-Phanto
http://www.flyertalk.com/forum/unite...ec-2014-a.html