You are here: ZDNet UK > News > IT Management

Industry watch Toolkit

Report: AT&T flaw exposed customer data

Bob Sullivan, MSNBC ZDNet.co.uk

Published: 03 Jan 2001 12:10 GMT

A flaw on AT&T's Web site has exposed billing and account information for thousands of small businesses to other customers, according to a report by MSNBC.com.

AT&T disabled part of its Web site Tuesday afternoon to protect customer data. Some 120,000 companies use AT&T's Small Business Center Web site to track their telecommunications bills, according to company spokesman Paul La Plante.

Only existing customers who were logged into the system would have been able to exploit the flaw and view the records. However, a mischievous account holder could have viewed six months' worth of billing records for the small businesses, including details from individual phone calls, according to the report.

Have your say instantly, and see what others have said. Click on the TalkBack button and go to the ZDNet News forum.

Let the editors know what you think in the Mailroom. And read what others have said.

Did you find this article useful?
57 out of 90 people found this useful

[##LC_TMP /zdnetuk/livery/ads/mpu.htm##] array(1) { [0]=> int(10000000) } ["story_categories"]=> array(1) { [0]=> string(22) "Other : Industry Watch" } ["limit_row"]=> int(10) ["include_subchannel_level"]=> int(4) ["exclude_element_ids"]=> array(1) { [0]=> string(7) "2083449" } ["last_days"]=> int(0) ["story_primary_url"]=> bool(true) ["debug"]=> bool(false) ["search_additional_info"]=> array(2) { ["full_header_image_info"]=> string(0) "" ["standard_header_image_info"]=> string(0) "" } ["return_cols"]=> array(10) { [0]=> string(5) "title" [1]=> string(7) "summary" [2]=> string(12) "article_type" [3]=> string(9) "live_date" [4]=> string(3) "url" [5]=> string(15) "additional_info" [6]=> string(10) "popularity" [7]=> string(13) "comment_count" [8]=> string(6) "author" [9]=> string(8) "story_id" } ["order_by"]=> array(1) { [0]=> string(10) "live_date+" } ["date_format"]=> string(1) "U" ["url_function"]=> string(18) "get_zduk_story_url" ["use_primary"]=> int(1) } */ ?>