Vodafone UK has changed the password reminder option for its online account management system. A number of reports recently noted that entering (or guessing) a mobile phone number would reveal the user's email address – and entering a user name would do the same.
The Vodafone password reminder option was disabled yesterday morning, over 12 hours after the issue was reported, and has now been reinstated so that it no longer displays any user details.
[More information: Vodafone forum; The ReallyMobileProject.com; Terence Eden's blog]