How could bank data end up on another computer on the local network?

Question

Information Security

Materiel:
The apartment has 2 computers, a TV set-top box and 3 mobile phones. It's all connected to one router and goes further.

The essence of the problem:
Bank card data for payment in online stores are used on computer 1 and phone 1.
These same data turned out to be auto-filled on computer 2 (in Skype and Odnoklassniki), while auto-filling forms and linking the card are disabled everywhere, except for Steam. I have nothing to do with computer number 2, I never paid or filled anything there, Steam is not there. When paying from a computer 2, the Sber application displays payment via NFC in the information. NFC is disabled on the phone.

Questions:
1) What are the assumptions about how the card data ended up on the second computer?
2) Is this a problem with the Sberbank application or a problem on computer number 1?
3) Is there some kind of binding to IP or something similar in payment systems?

Answer 1

There is such a thing as a Microsoft account that syncs saved form data between installed programs and the browser, as well as clumsy developers that allow the browser to save map data.
So if the window was installed on both cars under the same account - get it, sign it.

Answer 2

In theory, the daughter could take the card and pay her for something.
And so you need more details: what kind of browsers (on each of the devices); what site or application that had autofill; whether the same account (account) was used on this site / application (on all devices or only on some), etc.

Answer 3

I have chrome. There is a sync it was fun to watch my search history from mom and dad

Answer 4

I would block the card, issue a new one. And for online payments, make a virtual one, to which, if necessary, transfer the required amount. Otherwise, it may happen that all the devices in the house have a virus or something, and the evil hacker is just waiting for a large sum to appear on the card. Delete all banking applications, and from your smartphone too. SMS confirmation is set to the number whose SIM card is in another phone (preferably a simple one, not smart), but this is already paranoia, and very inconvenient.

Answer 5

Somehow, he also investigated the story of how a grandmother withdrew money from an ATM and allegedly it was not her, the card was chipped, she did not give the card to anyone and did not talk about the card with anyone. But across the road she has a bus stop where she was at the same time. But assured that 100% not her. There is definitely a connection :)