The scheme appears to target users with weak password. Users report multiple debits to their bank accounts tied to the Starbucks app have drained accounts of $50 dollars multiples times within minutes. The hackers use the auto refill function to swipe the cash.
Consumers are advised to use strong passwords and to use different passwords from those tied to bank accounts. Starbucks app users also should check any bank or PayPal accounts used to auto refill their Starbucks accounts for fraudulent transactions.
Starbucks has promised to beef up its security after complaints it fails to use a two step authorization process.