Ministry of Industry and Information Technology: Users should set the SIM card password in time and report the loss of the phone immediately

       The Ministry of Industry and Information Technology announced that recently, there were reports that criminals stole personal mobile phones, stole user personal information on a government APP, and then applied for online loans and consumption, causing property losses to users. The article was widely forwarded on the Internet, causing netizens to worry about the protection of mobile phone personal information and property safety.

       The Ministry of Industry and Information Technology immediately organized an investigation and interviewed the relevant person in charge of the telecom company involved on October 12. It is understood that the user did not report the loss of the phone card in time after the phone was stolen, which left room for criminals to exploit loopholes. The criminals obtained important personal information such as the user's ID number in a government APP through the weak verification method of "mobile phone number + verification code", used the user's personal information to change the mobile phone service password, used words to deceive and induce the customer service staff of the telecom company to unblock the reported lost phone card, and used the loophole of "recovering user password" of some online loan platforms to reset the user's payment password to defraud online loan funds, which ultimately caused property losses to users.

　　IT Home learned that in this regard, the Ministry of Industry and Information Technology requires the three basic telecommunications companies to strengthen security protection while facilitating users to handle business in sensitive links involving user identities such as service password reset and unblocking, strengthen risk prevention awareness training for customer service personnel, and be vigilant against abnormal business handling behaviors. In addition, the Ministry of Industry and Information Technology recommends that relevant units and enterprises desensitize data in a timely manner, and recommends that relevant industries collect, store, and use user personal information in accordance with the minimum necessary principle, and properly preserve the collected and stored user personal information in a graded and classified manner. At the same time, the Ministry of Industry and Information Technology also reminds users to set SIM card passwords in a timely manner, report the loss of their mobile phones as soon as possible, and strengthen security risk awareness.