No security in Myob today

I have already provided my details in a private message a few days ago, another moderator has my email address.

You know that the same issue is affecting us all.  Normally its email address to login, then password, then the code.  Myob shows the email address and then skips the next two steps, and bingo, one is straight into the file.

I can't believe that there is no fix as yet for this massive issue.

So the problem is not fixed, we are all still able to just go into the file without any security in place.

Why did it take three days before Myob state "we are NOW working on the problem"?

I did find it a bit annoying that each time I clearly wrote what the issue was I was presented with reasons as to why the issue was related to something that I must have done - the issue was with Myob and not limited to my file, other users of Myob faced exactly the same problem.

Does this lack of security have anything to do with the mass outage recently, was the system hacked or something?

Its now Friday and still no security on our file.

No update from Myob since Wednesday.

The lack of information from Myob is the quickest way to lose customers....

Same happened to me on login.  Not good.

Exactly the same happened to me.  I am feeling very anxious.  We had a security breach four months ago and I thought the 2FA would be more trustworthy.  I don't know if it is safe to still use it today?  

Please reset and update your password.  I would like some answers from MYOB about this situation and why this happened.  What are the protocols for this?  

Myob people - its been many hours now, no one has responded as yet!

What is the state of security in my file? is there any security in place?

If we now get compromised are Myob going to pay for the defect stemming from their system?

I need an answer!

Still no response from Myob about this morning.

I recently closed out of Myob and reset my password to a new password.

However, I logged out and went back in and was able to access to the company file straight away without asking me to enter password or 2FA Authenticator. I don't think I am fully secure and protected right now.  Can I please get some answer soon as possible.

Hi All,

Thank you for your posts and for letting us know your concern. I'm sorry to hear that you feel your account is not secured. I'll be more than happy to help you with this. I want to know if it's an online or offline file.

• The AccountRight Live login: This is your my.myob account details (your email address and password). If you're signed in, you will not be prompted for this log-in (email address and password), and you're automatically signed into the company file once you select it.
• The company file login: this is your User ID and password. If you've linked your user ID to your my.myob account through Setup >> User Access, this would skip the User ID and password screen. To make sure you are totally signed out, you need to go to Services>>Sign out of AccountRight Live. This will close the file, and once you select the company file again, it will ask for your email address, password, and 2FA code. If it's the company file sign on, then you'll need to check the set-up of your user ID.

Please let me know if you need further help.

Kind regards,

Sai

I think you are missing the point - 2FA is in place in our company file, no access was updated or amended - it was simply a case of during the opening of the file this morning there was no 2FA in place.  This is a Myob issue, not a user issue.

If nothing was changed in our company file (I was last to use on Friday, and first to use this morning) how can the 2FA not be working.  That is the question Myob needs to answer.

Also, I have come home from work to work in Myob - again I didn't need any authentication to get into the file.

As stated, to "log in" to the forum this morning no 2FA was required either.

Why?  Where is our security Myob?  How can this happen to me, and other unrelated Myob users (those that put posts up)?

Hi JoanneMcG,

Thank you for the response. In this case, the reason you are not being asked to put the 2FA because you tick the box that says, 'Trust this device for 30 days'. You don't need to enter the code once you tick that box. You can clear the 'Trust this device' setting by signing out to AccountRight (Service>>Sign out from AccountRight).  Trust this device for 30 days, has detailed information and instructions to assist you with this.

Please let me know if you need further help.

Kind regards,

Sai