ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


Online business Toolkit

Exclusive: Egg admits security breach

Jane Wakefield ZDNet.co.uk

Published: 01 Dec 1999 14:26 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

UK Online bank Egg, blamed "human error" Wednesday for the security breach which allowed a user to access another customer's account.

Alfredo Maio, business development manager at software firm SCO, logged onto his Egg account a week and a half ago to find someone else's banking details on his screen. He called Egg immediately and was told it was an isolated incident caused by a software failure. According to an Egg spokeswoman Wednesday morning, a "breach of internal procedure" caused by human error led to the breach.

Maio is outraged by the incident and wants assurances it won't happen again. "I had access to someone else's account and information. I could have done anything to it," he said. Scrambling to defend itself, Egg promised there would be no repeat incidents. "We accept it is not best business practise and we hold our hands up. There was a breach of IT procedure during a routine update to the security system," the spokeswoman said. "We closed the system down immediately. There were less than five customers affected."

Halifax was the victim of a similar security breach last week -- with a customer logging onto someone elses share details. A Halifax spokeswoman claimed its online share dealing system is now safe and is confident the incident has not dented consumer confidence in the run up to Christmas. "There has been no impact. On Monday [when the system went live again] we had double the normal registrations. Only two customers closed their accounts," she said.

The Egg spokeswoman claimed that future system updates will be completed when the site is not live to protect customers. Unimpressed Maio is closing his Egg online account and intends to open another with NatWest.

Several Egg customers have contacted ZDNet News expressing concern over the incident. One, marketing manager Susan Rundle, summed up the attitude of many. "My confidence in Egg is definitely cracked. I am seriously considering closing my account down."

Jupiter analyst Nick Jones thinks the incidents could affect consumer confidence. "A few blips on the chart like this is bound to be a consideration but I doubt it will be a big influence. Security is a dominant issue but it is not the only one holding people back from online shopping," he said.

UK manager of Internet bank first-e Richard Thackray expressed his sympathy for Egg. "I am upset for them. When things like this happen it reflects on the whole industry," he said. He admits the incidents are bound to influence consumer confidence in online banking. "It is not a good message to send out and it may dampen the move to online but it won't stop it," he said.

Will Knight contributed to this story

Are you an Egg customer?

Are you concerned?

Will you shop online this Christmas knowing Halifax and Egg have had recent security episodes?

Tell the Mailroom

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?
48 out of 87 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:












Sentry Posts Blog

Nasa and the virus

Yesterday the BBC ran a story about a computer virus making it into orbit, which I read with incredulity. OK, it's a nice silly season story on the surface, but what really got me was... More

3 comments

Customer data found on eBay server hig...

The recent news about customer details being retrieved from a server sold on eBay is yet another story about the sorry state of information security in the electronic age (see: http://news.zdnet.co.uk/...m).... More

Post a comment

Does it matter if you are an aardvark...

In spam terms, apparently it does. According to Cambridge University security expert Richard Clayton, if your email address is aardvark at animal.net, you are more likely to receive... More

1 comment

Featured Talkback

I wonder, who needs .asia domain? I cannot imagine, what would be useful for Microsoft.asia? Toyota.asia? Then let's register .europe (if .eu is too short). Or perhaps Microsoft.southamerica, Dell.australiaandnewzealand, Coca-Cola.africa... Sound funny? Then why not just use the global and country domains? Or perhaps it is time to drop the domains at all?

By: LadyRoot

Read full story:
Businesses advised to register .asia domains