Mobile banking app incident 12 March 2026

A mobile app incident occured on 12 March. We’re sorry this happened, and we want to reassure you that the issue has now been fully resolved. If you have questions, the information below explains what happened.

What was the incident in the app and what happened?

The incident was caused by an update to our mobile banking apps on 12 March. A limited number of customers may have briefly seen some other customers’ transactions, and potentially had their transactions viewed by other customers.

This only affected the app and not internet banking. In order to have seen another person’s transactions, a customer had to access their own list of transactions within small fractions of a second of another mobile banking app user doing the same.

 

Was any customer data or information compromised?

Customers were not able to perform unauthorised actions or move money on anyone else’s account, and customer balances were not affected. The issue related to current account transactions only. The information that was visible would not be sufficient on its own for someone to carry out fraud against an individual’s bank account.

We have sophisticated fraud detection capabilities and monitoring in place at all times. We have not identified any evidence of fraud occurring as a result of this incident and will continue to monitor closely.

 

Has this happened before at Halifax? Is it still safe to bank with you?

This was an isolated incident which we are sorry for. Customers’ money and data remains safe and there is nothing customers need to do differently to bank with us.

 

Are you paying out compensation because of this?

We have not identified evidence that customers have suffered a financial loss and have not made compensation payments on this basis. We’ll continue to support customers in line with our responsibilities under the Financial Conduct Authority’s rules and, in line with our existing practices, we may make goodwill payments for distress and inconvenience in individual cases, for example where there has been a direct impact on an individual.

 

Are you asking customers to delete information such as screenshots?

We are asking any customers that saved or shared any information relating to anyone else - for example by taking screen shots, posting online, or writing it down - to remove or delete it.