Samsung sent me to EE for a repair of my phone.
Agent took my phone, asked me to remove pin locks. 10 minutes later, my other phone pings a new phone number added to my google account. I rush back to the EE store. The agent refuses doing anything to the phone. He confirms with the repair technician who confirms the same.
On asking the store manager to confirm the same, the store manager eventually confirmed that the phone was not factory reset by them, but the repair technician was the one who added the new sim as a valid phone number to my google accounts! Which was completely opposite of what the initial agent told me when I raised my concern of security breach.
And this is very worrying.
I immediately asked for my device to be handed over back to me. It took them 30 mins to give it back to me & the device was now returned factory reset. So I can not check what and how much access the store personal had to my device or its data post my catching them.
I plan to raise a GDPR breach case against Samsung, EE & the high street store. I have serious concerns that my data/bank details/stored cards/ stored passwords on the google account could have been accessed.
I requested a copy of the recorded conversation (from his body cam) & was refused. The manager asked to contact EE support for a copy.
Whom can I contact for a copy of the recordings?
In addition to this, the same store (& repair tech.) had seen the phone 2 days ago and only a replacement screen guard was to be replaced under warranty. But as they said they would be wiping the phone, I had rescheduled to today post a backup of the device. When I raised the concern of breached security in middle of the today's repair session, the technician said they would need to be paid for additional repairs due to faulty bleeding LCD etc.
I am deliberately leaving out the store location here, but if someone from EE contacts I will share details.
