huge sprint security breach

someone has used a flaw in the pay by phone billing system and charged over $1,000 to my own account using my bank account with only supplying sprints pay by phone system my phone number. i walked two sprint reps through the loop hole using two of my family members phone numbers with there permission. with just there phone number i was able to get there balance on the account and could have payed any amounts to the debit or credit card the user had on file.

this is a breach of every sprint/nextel users privacy it also could wreck havoc to every user on there network. and is also a BREACH of contract to EVERY sprint/nextel user that has signed a privacy agreement with the company. with just your phone number a 3rd party can access your account and make payments and more. it is my feeling ( i'm no lawyer ) that this flaw would void any user agreement held by sprint/nextel users.

over the past 4 days since the two charges to my account from my bank account for over $500.00 each i have spoke with over 17 reps from sprint most don't know what to even say and forward me to the fraud department. most of the fraud reps and there support teams are up in the air about what to do ( yes i have filed a police report and they are following through with it ) the sprint rep did tell me that the payment was made via *3 on a sprint phone but because of privacy laws and policy's at sprint they can not tell me who made these charges even tho they broke my privacy agreement by letting someone make payments after accessing my account with only my phone number via *3 on there sprint phone.

rep james from the fraud dept. said today after i walked him through the steps i found that breaches any sprint/nextel users account integrity said that " no one would do this in there right mind because it was wrong... is it fraud he said no.. does it happen he said yes... but very rarely. ) and our conversation then turned to the stopped payment on the checks payed to my account with out my knowledge and that my account would be canceled and i would lose my phone number in the process.

i then was connected to paul a finace rep out of mesa arizona. after explianing all to him and walking him again through the steps using a sprint account of a user in my family who works as a TV executive out of Florida he was in shock. i could almost hear his jaw drop as we made it through the last steps of breaching someones account with the pay by phone system sprint/nextel has set up. theres much more to this story then i can even type im so upset about this. im still working to clear up my account but i think i may have the tools to press this issuse to the top if i can get the word out. i feel this maybe the biggest beach of user info for sprint/nextel to date.

thank you for your time in reading this
Mike
a very upset sprint user!

more on this story is posted at the Utility Consumers' Action Network - non-profit, public interest consumer advocacy website