http://www.computing.co.uk/computing/news/2221823/online-passport-check-suffers-4127047By Tom Young
Computing
17 July 2008
The Identity and Passport Service (IPS) has admitted a data breach in
its online passport application progress checking service.
The incident was formally reported to the Information Commissioner's
Office (ICO) but has not been made public until now.
"A parent was able to discover the existence of a child's passport
application by using the online application progress checking service,
possibly without entitlement," according to an annual report from the
IPS.
The parent involved contacted the IPS in June 2007 to warn them.
The ICO advised the IPS it should require anyone making enquiries into
the passport application progress to provide the application's unique
reference number. The IPS said it would continue to monitor and assess
its information risks to identify and address any weaknesses.
[...]
_______________________________________________
Attend Black Hat USA, August 2-7 in Las Vegas,
the world's premier technical event for ICT security experts.
Featuring 40 hands-on training courses and 80 Briefings
presentations with lots of new content and new tools.
Network with 4,000 delegates from 50 nations.
Visit product displays by 30 top sponsors in
a relaxed setting.
http://www.blackhat.com
