Feeds

Travelocity drops customers' pants in public

But it's very, very sorry

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Online travel company Travelocity has been criticised by security experts after making personal details of site users visible on its site.

In a grovelling apology issued to the press, Travelocity said that names and addresses of people who had entered some of its competitions had been "inadvertently made accessible" through a link on the site.

"Upon being made aware of this situation," the company said, "we immediately removed the data from our site. At no time were any member profiles, credit card information or customer data exposed."

Security experts have criticised the company for bad security practice. Paul Rogers, a network security analyst at MIS, said that it was a very basic error, but one that happens quite frequently.

"Information from forms should be stored outside the web root," he said. "For a company that has implemented a security structure it is a surprising mistake to make, but power is nothing without control and security is nothing without common sense."

Neil Barrett, technical director at Information Risk Management, echoes his sentiments. He commented: "They could have ten times the firewall protection they have and still cock up the arrangement of content on the site."

Travelocity said that the mistake had served as a wake up call about the protection of its members' privacy: "We regret this incident occurred. We take the privacy of those who participate on our site, whether they are members, contest participants or visitors, very seriously." ®

Internet Security Threat Report 2014

More from The Register

next story
Bladerunner sequel might actually be good. Harrison Ford is in it
Go ahead, you're all clear, kid... Sorry, wrong film
Euro Parliament VOTES to BREAK UP GOOGLE. Er, OK then
It CANNA do it, captain.They DON'T have the POWER!
Musicians sue UK.gov over 'zero pay' copyright fix
Everyone else in Europe compensates us - why can't you?
I'll be back (and forward): Hollywood's time travel tribulations
Quick, call the Time Cops to sort out this paradox!
Megaupload overlord Kim Dotcom: The US HAS RADICALISED ME!
Now my lawyers have bailed 'cos I'm 'OFFICIALLY' BROKE
Forget Hillary, HP's ex CARLY FIORINA 'wants to be next US Prez'
Former CEO has political ambitions again, according to Washington DC sources
prev story

Whitepapers

10 ways wire data helps conquer IT complexity
IT teams can automatically detect problems across the IT environment, spot data theft, select unique pieces of transaction payloads to send to a data source, and more.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.