UK: Personal data exposed on website (Parcelforce)

[security curmudgeon <jericho () attrition org>]

http://news.bbc.co.uk/2/hi/business/8107737.stm


Personal data exposed on website
By Kevin Peachey and Bill Wilson
Personal finance and business reporters, BBC News

Personal data including the signatures of recipients has been exposed to 
those tracking deliveries on the Parcelforce website, the BBC has 
discovered.

A failure in the system allowed people using the mail tracing service 
access to the name, postcode and signature of various addressees.

The breakdown put Parcelforce at risk of breaching data protection rules.

The delivery service, part of the Royal Mail Group, apologised. It said 
the problem had been resolved.

[..]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php