The Channel logo

News

By | Richard Chirgwin 13th January 2011 23:15

Vodafone sacks login leakers

Insiders less secure than Internet, apparently

Vodafone has dismissed “a number of staff” following the misuse of login credentials that allowed unauthorized access to a Web portal meant to be accessible only to its employees and those of its resellers.

The data breach, misinterpreted as customer details being published on the Internet by a number of Australian media outlets earlier in the week, led to accusations that customer data such as credit card numbers was being stolen, and that people were misusing customer data to spy on individuals.

In an announcement made on Thursday, Vodafone re-stated that “customer records are not publicly available or stored on the Internet”.

The company says it is continuing to review its data security.

Questions will, however, remain. As pointed out to The Register by ANU professor and Australian Privacy Foundation chair Dr Roger Clarke, Vodafone will have to satisfy organizations like the Australian Privacy Commissioner that the portal used by staff and partners doesn’t provide access to more customer data than they need to carry out their normal functions. ®

comment icon Read 4 comments on this article alert Send corrections

Opinion

Lost

Jennifer Baker

European Commission still silent despite Ireland's plea

Neil McAllister

Claims that cloud will drive Oracle's future growth ring hollow

Features

AWS and Salesforce match up to Ellison's hardware
Five years on, what did Larry's lot do to Sun's partner network?
But here's why we're (probably) not staring at a crash
BlackBerry Passport
Network intelligence - our secret weapon