1.1 million users on Twitter have reported being hit with the bug since early Saturday, according the Twitter account for the American Bankers Association.
Users can now click the “Show All” button to see their credit card details.
If they don’t have one, they can sign up for one by logging in to the bank website.
If that doesn’t work, they’ll need to use the banking services of a bank to get their details.
If they do have a credit card, the bug allows attackers to gain access to all the details on the account.
The bug also lets attackers create an account and access its personal details.
In a blog post, the banking group says that if an account is created, the “accounts private key is automatically generated, allowing an attacker to access the account’s personal details without having to pay any fees.”
The bank is notifying affected users of the vulnerability.