Tech Daily

News | Analysis | Comment | Features | Reviews

Barclays' web bank suffers security breach

Barclays has reopened its online banking service after an embarrassing security breach forced it offline yesterday afternoon.

John Leyden & Ian Lynch, vnunet.com 01 Aug 2000

Barclays has reopened its online banking service after an embarrassing security breach forced it offline yesterday afternoon.

The shutdown of one of the UK's biggest internet banking services happened after four of the bank's customers reported that they were able to see other customers' account details. The discovery of the problem followed a software upgrade carried out on Saturday.

However, the bank has sought to reassure customers by insisting that despite being able to see these details, it would not have been possible to carry out transactions using those accounts.

The site was offline from 3.30pm yesterday until 7pm, when the service reopened using the older software. The upgraded software, which was designed to improve transaction processing, is now under review.

Barclays has 1.25 million online customers, some 85,000 of whom used the service between the time of the upgrade and the suspension.

A spokeswoman for the bank said: "The security of our customers is paramount. We reinstated online banking using the old service. We will not re-release the upgrade until we're satisfied problems are rectified."

She added that no customers had lost money because of the incident, and that the bank has launched an investigation to determine the root cause of the software problem.

The Barclays glitch comes just days after energy company PowerGen admitted that thousands of its customer account details were exposed on its website.

Consumer groups said security breaches like these are holding back ecommerce. Anna Bradley, director of the National Consumer Council, said: "Our research shows that trust is a serious concern for consumers. Barclays' problems further undermine consumer confidence and until leading providers, such as Barclays, address the problems of security, privacy and customer service, ecommerce will not take off."

Barclays is not the first online bank to suffer problems with its website. Egg and cahoot have both experienced troubles, and the overall standards of internet banking are being monitored by the Financial Services Association (FSA).

FSA chairman Howard Davies spoke in June this year of the need for banks to get new launches and upgrades right first time or suffer damage to their reputations. An FSA spokeswoman said today that it was talking to all banks about their internet operations before the Financial Services and Markets Act comes into effect in 2001. Banks will then have to provide the FSA with details of the number and types of complaints they receive.

Currently, the UK banking ombudsman service, which mediates disputes between customers and banks, deals with around 10,000 complaints a year, only a handful of which are related to online banks.

A spokesman at the Department of Trade and Industry told vnunet.com: "This is a matter for Barclays. However, this does underline the need for rigour in managing change to prevent information security breaches. We have regular contact with Barclays' information security specialists and we will explore the extent to which the lessons learnt can be put to wider use."

See also:

This year has seen a succession of high-profile security breaches, and even the best-protected networks remain curiously vulnerable.  11 Dec 2000
Back-office staff at Lloyds TSB had to work frantically this afternoon to smooth out glitches with its internet banking service after a connectivity problem left customers unable to access their accounts.  09 Oct 2000
Fuelled by the rising need to secure ebusiness systems, the worldwide security software market will grow by 22 per cent a year, according to a survey published this week.  04 Oct 2000
Boots has unveiled a combined loyalty card and credit card in partnership with Egg, the internet banking arm of Prudential.  25 Sep 2000
We take a closer look at business portal Clearlybusiness.com, which aims to provide small businesses with essential information and back-office resources.  20 Sep 2000
Security experts at Bull are investigating reports that a flaw with its web servers allowed access to confidential customer data.  01 Sep 2000
Recent high profile internet security breaches tell us more about corporate IT in general than specific problems with the web.  31 Aug 2000
Freeserve, the UK's largest internet service provider, has joined forces with Barclays to launch a website aimed at the UK's three million small businesses.  30 Aug 2000
Online bank Egg has confirmed that three people have been arrested after its anti-fraud software detected their attempts to set up bogus online bank accounts.  23 Aug 2000
Barclays' takeover bid for Woolwich marks a victory for the latter's Open Plan banking system.  17 Aug 2000
UK supermarket Safeway is investigating how a computer hacker gained access to its databases and sent a hoax message to thousands of customers.  14 Aug 2000
Following a series of high profile online security breaches, it is becoming increasingly clear that companies need to implement rigorous security policies if consumer confidence is not to be permanently dented.  14 Aug 2000
High street veteran Woolworths has been forced to temporarily close its online store after customer credit card and personal details were exposed on its website.  11 Aug 2000
Barclays bank has suffered another embarrassing incident, calling the security of its online banking service into question yet again.  11 Aug 2000
Recent high profile security breaches at UK ecommerce websites have fuelled consumer fears that it is not safe to have their personal information flying around in cyberspace. But such problems appear to be the result, not so much of faulty technology, but of companies succumbing to short-term solutions and failing to test their systems adequately before going online.  08 Aug 2000
Lack of consumer confidence is stifling ebusiness uptake in the UK, according to the National Consumer Council.  03 Aug 2000
Security has finally become an item on the corporate agenda but many companies are taking the wrong approach to addressing the issue, according to research by IDC.  21 Jul 2000
Utility firm PowerGen admitted today that it had suffered a breach of internet security which resulted in the leak of bank and contact details of thousands of its customers.  19 Jul 2000
IT consultant and trouble shooter John Chamberlain said he stumbled across files containing PowerGen customers' credit card details after watching a BBC Panorama programme on IT security.  19 Jul 2000
While security has always been an issue, the ability of organisations and individuals to keep their confidential data safe not only from prying eyes but also from attack is becoming an ever greater concern. The problem is becoming particularly marked as the world becomes more networked and companies conduct increasing amounts of business over the internet. Here we look at a range of issues that are starting to affect every one of us.  29 Jun 2000

All Hacking

Like this story? Spread the news by clicking below:

Post this to Delicious del.icio.us    Post this to Digg Digg this    Post this to reddit reddit!

R E L A T E D   C O N T E N T