Barclays has reopened its online banking service after an embarrassing security breach forced it offline yesterday afternoon.
Barclays has reopened its online banking service after an embarrassing security breach forced it offline yesterday afternoon.
The shutdown of one of the UK's biggest internet banking services happened after four of the bank's customers reported that they were able to see other customers' account details. The discovery of the problem followed a software upgrade carried out on Saturday.
However, the bank has sought to reassure customers by insisting that despite being able to see these details, it would not have been possible to carry out transactions using those accounts.
The site was offline from 3.30pm yesterday until 7pm, when the service reopened using the older software. The upgraded software, which was designed to improve transaction processing, is now under review.
Barclays has 1.25 million online customers, some 85,000 of whom used the service between the time of the upgrade and the suspension.
A spokeswoman for the bank said: "The security of our customers is paramount. We reinstated online banking using the old service. We will not re-release the upgrade until we're satisfied problems are rectified."
She added that no customers had lost money because of the incident, and that the bank has launched an investigation to determine the root cause of the software problem.
The Barclays glitch comes just days after energy company PowerGen admitted that thousands of its customer account details were exposed on its website.
Consumer groups said security breaches like these are holding back ecommerce. Anna Bradley, director of the National Consumer Council, said: "Our research shows that trust is a serious concern for consumers. Barclays' problems further undermine consumer confidence and until leading providers, such as Barclays, address the problems of security, privacy and customer service, ecommerce will not take off."
Barclays is not the first online bank to suffer problems with its website. Egg and cahoot have both experienced troubles, and the overall standards of internet banking are being monitored by the Financial Services Association (FSA).
FSA chairman Howard Davies spoke in June this year of the need for banks to get new launches and upgrades right first time or suffer damage to their reputations. An FSA spokeswoman said today that it was talking to all banks about their internet operations before the Financial Services and Markets Act comes into effect in 2001. Banks will then have to provide the FSA with details of the number and types of complaints they receive.
Currently, the UK banking ombudsman service, which mediates disputes between customers and banks, deals with around 10,000 complaints a year, only a handful of which are related to online banks.
A spokesman at the Department of Trade and Industry told vnunet.com: "This is a matter for Barclays. However, this does underline the need for rigour in managing change to prevent information security breaches. We have regular contact with Barclays' information security specialists and we will explore the extent to which the lessons learnt can be put to wider use."
See also:
This year has seen a succession of high-profile security breaches, and even the best-protected networks remain curiously vulnerable.
11 Dec 2000Back-office staff at Lloyds TSB had to work frantically this afternoon to smooth out glitches with its internet banking service after a connectivity problem left customers unable to access their accounts.
09 Oct 2000Fuelled by the rising need to secure ebusiness systems, the worldwide security software market will grow by 22 per cent a year, according to a survey published this week.
04 Oct 2000Boots has unveiled a combined loyalty card and credit card in partnership with Egg, the internet banking arm of Prudential.
25 Sep 2000We take a closer look at business portal Clearlybusiness.com, which aims to provide small businesses with essential information and back-office resources.
20 Sep 2000Security experts at Bull are investigating reports that a flaw with its web servers allowed access to confidential customer data.
01 Sep 2000Recent high profile internet security breaches tell us more about corporate IT in general than specific problems with the web.
31 Aug 2000Freeserve, the UK's largest internet service provider, has joined forces with Barclays to launch a website aimed at the UK's three million small businesses.
30 Aug 2000Online bank Egg has confirmed that three people have been arrested after its anti-fraud software detected their attempts to set up bogus online bank accounts.
23 Aug 2000Barclays' takeover bid for Woolwich marks a victory for the latter's Open Plan banking system.
17 Aug 2000UK supermarket Safeway is investigating how a computer hacker gained access to its databases and sent a hoax message to thousands of customers.
14 Aug 2000Following a series of high profile online security breaches, it is becoming increasingly clear that companies need to implement rigorous security policies if consumer confidence is not to be permanently dented.
14 Aug 2000High street veteran Woolworths has been forced to temporarily close its online store after customer credit card and personal details were exposed on its website.
11 Aug 2000Barclays bank has suffered another embarrassing incident, calling the security of its online banking service into question yet again.
11 Aug 2000Recent high profile security breaches at UK ecommerce websites have fuelled consumer fears that it is not safe to have their personal information flying around in cyberspace. But such problems appear to be the result, not so much of faulty technology, but of companies succumbing to short-term solutions and failing to test their systems adequately before going online.
08 Aug 2000Lack of consumer confidence is stifling ebusiness uptake in the UK, according to the National Consumer Council.
03 Aug 2000Security has finally become an item on the corporate agenda but many companies are taking the wrong approach to addressing the issue, according to research by IDC.
21 Jul 2000Utility firm PowerGen admitted today that it had suffered a breach of internet security which resulted in the leak of bank and contact details of thousands of its customers.
19 Jul 2000IT consultant and trouble shooter John Chamberlain said he stumbled across files containing PowerGen customers' credit card details after watching a BBC Panorama programme on IT security.
19 Jul 2000While security has always been an issue, the ability of organisations and individuals to keep their confidential data safe not only from prying eyes but also from attack is becoming an ever greater concern. The problem is becoming particularly marked as the world becomes more networked and companies conduct increasing amounts of business over the internet. Here we look at a range of issues that are starting to affect every one of us.
29 Jun 2000 All Hacking