We have a customer with a Barclaycard account who is seeing transactions for a completely different customer. They are both Barclaycard customers, and both on our platform.
We can see the raw data for the incorrect transactions, but we don't detect any error, since the AccountId corresponds to the correct customer in the data.
The transactions are retrieved for both the correct and incorrect customers - the AccountId and TransactionId are different in the raw data, but everything else is the same, including CardInstrument and BookingDateTime.
This is happening for lots of transactions, especially in October.
One partially redacted example transaction which we received for the wrong customer is:
We found the same transaction for the correct customer:
Transaction data received for wrong connection, for wrong customer.
Customer is seeing transactions for a different customer, representing a personal data breach.