[ISN] Online passport check suffers security breach

From: InfoSec News <alerts_at_infosecnews.org>
Date: Fri 18 Jul 2008 - 02:46:04 CDT
http://www.computing.co.uk/computing/news/2221823/online-passport-check-suffers-4127047

By Tom Young
Computing
17 July 2008

The Identity and Passport Service (IPS) has admitted a data breach in 
its online passport application progress checking service.

The incident was formally reported to the Information Commissioner's 
Office (ICO) but has not been made public until now.

"A parent was able to discover the existence of a child's passport 
application by using the online application progress checking service, 
possibly without entitlement," according to an annual report from the 
IPS.

The parent involved contacted the IPS in June 2007 to warn them.

The ICO advised the IPS it should require anyone making enquiries into 
the passport application progress to provide the application's unique 
reference number. The IPS said it would continue to monitor and assess 
its information risks to identify and address any weaknesses.

[...]
Received on Fri Jul 18 02:46:04 2008
Google
 
Web www.infosecnews.org