Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

Our HR system has a self service portal where employees view payslips, book holiday and update their...