27 February 2017
Visit dh.com

14-year-olds use online manual to hack ATM

13 June 2014  |  11337 views  |  3 atm

Forgoing a kick around in the playground, a couple of teenage boys spent one school lunch break last week hacking into a Bank of Montreal cash machine.

After finding an old ATM service manual online, Matthew Hewlett and Caleb Turon decided to head to their nearest BMO machine at a Safeway store in their hometown of Winnipeg.

When the boys tried to get into the system they were asked for a password. Taking a punt on a commonly used default, they were shocked to see their attempt work.

Instead of trying to clear the machine out, the pair made their way to the nearest BMO branch to flag the security risk but, Hewlett told the Winnipeg Sun, staff did not believe them.

"So we both went back to the ATM and I got into the operator mode again. Then I started printing off documentation like how much money is currently in the machine, how many withdrawals have happened that day, how much it's made off surcharges," Hewlett says.

The teenagers even changed the machine's greeting screen from 'Welcome to the BMO ATM' to 'Go away. This ATM has been hacked.'

When they returned to the BMO branch with documentation of their hack, the branch manager vowed to contact security. The bank has since taken steps to prevent a repeat but insists that customer data was never at risk.

Meanwhile, caught up in their adventure, the boys were late for lessons and asked bank staff to write a note.

"Please excuse Mr Caleb Turon and Matthew Hewlett for being late during their lunch hour due to assisting BMO with security," the letter presented to the school secretary began.

Comments: (3)

James Piggot
James Piggot - Misys - London | 16 June, 2014, 15:36

This is both very funny and serious at the same time! I love the ending where the bank write a note excusing the boys for being late due to them assisting the bank with security. But why on earth did this happen and how come this bank is still operating if their security is so lax? I guess the answer is they don't employ any 14 year olds?

Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
A Finextra member
A Finextra member | 16 June, 2014, 16:31 I think BMO security and audit should give you two boys a summer job ...well done ..... Shake the tree and fruit will fall ...... LOL
Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
A Finextra member
A Finextra member | 16 June, 2014, 16:33 One more lesson about security ..... Just because the door is closed, does not mean it's locked...
Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

Indonesian banks target islanders with floating ATMs

Indonesian banks target islanders with floating ATMs

23 May 2014  |  8558 views  |  2 comments | 20 tweets | 11 linkedin
Poland gets Europe's first biometric ATM shared network

Poland gets Europe's first biometric ATM shared network

14 May 2014  |  10832 views  |  1 comments | 12 tweets | 11 linkedin
ATM glitch gives homeless man $37k

ATM glitch gives homeless man $37k

07 April 2014  |  5256 views  |  1 comments | 4 tweets | 6 linkedin
A little short? Sainsbury's ATM built 15 inches off the ground

A little short? Sainsbury's ATM built 15 inches off the ground

28 March 2014  |  8055 views  |  2 comments | 12 tweets | 8 linkedin
Thieves tunnel their way to ATM cash

Thieves tunnel their way to ATM cash

20 March 2014  |  5126 views  |  0 comments | 10 tweets | 6 linkedin
Thief tries to blow up ATM, sets himself on fire

Thief tries to blow up ATM, sets himself on fire

22 November 2013  |  5030 views  |  0 comments | 6 tweets | 4 linkedin
ATM gives away free money, as long as you promise to share it

ATM gives away free money, as long as you promise to share it

26 February 2013  |  8153 views  |  0 comments | 13 tweets | 4 linkedin
Hacker plays Angry Birds on ATM

Hacker plays Angry Birds on ATM

22 February 2013  |  19435 views  |  2 comments | 27 tweets | 6 linkedin

Related company news

 

Related blogs

Create a blog about this story (membership required)
http://www.financialcrimerisk.fiserv.com/aml?r=finextravisit dh.com

Who is commenting?

A Finextra member Finextra Member Commented on: Bank consultancy Zeb o...
A Finextra member Finextra Member Commented on: In wake of Cloudflare...
A Finextra member Finextra Member Commented on: Final PSD2 SCA & C...

Top topics

Most viewed Most shared
EBA to relax controversial PSD2 authentication rulesEBA to relax controversial PSD2 authentica...
13299 views comments | 52 tweets | 74 linkedin
RBS to become fintech fund and high street outlet for challenger banks under HMT remedyRBS to become fintech fund and high street...
8744 views comments | 40 tweets | 34 linkedin
BNY Mellon seeks blockchain experts for new emerging biz and tech teamBNY Mellon seeks blockchain experts for ne...
7428 views comments | 7 tweets | 4 linkedin
hands typing furiouslyBlockchain Technology
7191 views 1 | 18 tweets | 7 linkedin
High rate of defaults hit P2P lending sectorHigh rate of defaults hit P2P lending sect...
7050 views comments | 19 tweets | 13 linkedin

Featured job

Six Figure Base + Commission + Stock Options
London

Find your next job