Advertisement
Promo

Security threats Toolkit in association with http://ad.doubleclick.net/clk;214682528;14505427;f?http://uk.blackberry.com/ataglance/security/

Capita takes the blame for tax security lapse

Colin Barker ZDNet.co.uk

Published: 31 Aug 2005 13:45 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

IT services company Capita has apologised for the "regrettable error" that saw the personal information and credit card details of local residents in Lambeth, London, emailed as plain text.

One member of Lambeth Council has called for an inquiry into the incident, which was first reported by ZDNet UK on Tuesday. Capita is still refusing to reveal how many residents were affected by the glitch, which affected Lambeth's online council tax system.

The incident took place last week and only came to light after an alert council tax payer in Lambeth warned the council of the problem.

According to a statement issued by Capita on Wednesday, the incident "was caused by a member of Capita staff who, during a complex software upgrade, omitted to activate the encryption code which masks certain customer details". As a result the details were shown in plain text in the emails sent to confirm payment and as a result could be seen by anyone who intercepted the email.

"Lambeth Council and Capita apologise for this regrettable but isolated error," said Capita in a statement. This "affected a small number of citizens", Capita added, without revealing how many had been affected.

The mistake is particularly serious, given the risks posed by ID theft today. Capita insisted that it was "an isolated error that has never occurred before" and said it has " reviewed its processes and staff training to mitigate such a situation recurring".

Capita also said that it "took prompt action to rectify the error within 48 hours", but did not explain why it took two days to rectify the mistake.

"This is quite clearly unacceptable," said Councillor Daniel Sabbagh, the finance spokesman for the opposition Labour Party in Lambeth. "We will be asking for further information, and demanding a full inquiry to ensure that no resident has lost out as a result of this security breach."

On Tuesday, a Lambeth Council spokeswoman said that it was "unacceptable for this information to be displayed [in this way]".

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?
88 out of 202 people found this useful


Company/Topic Alerts

Create a new alert from the list below:





Video icon

Video

Sentry Posts Blog

Behind the Scenes: Next Gen Mobile Tec...

Behind the Scenes: Next Gen Mobile Technology Author: Eric Everson, Founder MyMobiSafe.com With infrastructure speeds continually improving at the network level of the world’s leading... More

Post a comment

Nasa hacker petition presented to Numb...

Sting's wife Trudie Styler and Janis Sharp have presented a petition to Number 10 calling for Nasa hacker Gary McKinnon not to be extradited to the US. Styler, and Sharp, who is... More

Post a comment

UK to appoint cyber-sec tsar?

The UK is to appoint a cyber security tsar along the lines of the US, according to a story in the Telegraph this morning. The story is similar to one that appeared in the Guardian... More

Post a comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters