Feeds

Scarborough Building Society pulls insecure 'print' form

Ticked all the wrong boxes

Intelligent flash storage arrays

Scarborough Building Society has pulled an insecure form from its site after it emerged that sensitive information was sent over an unencrypted connection.

An online application form for various types of savings accounts invited prospective investors to fill in various categories of sensitive personal information before printing off the form and sending it in to the society by conventional post. In reality, data was exchanged with the society's servers as checks were made to ensure the form was filled in correctly. This contradicts what the society told customers at the bottom of the form and what was implied by the procedure of posting off information they had typed in.

Not only that, but as Reg reader Alan Iwi was quick to notice this data was sent over an insecure (unencrypted) connection, leaving it vulnerable to potential eavesdropping attack. Scarborough reacted quickly on notification, and pulled the form and launched an investigation.

"We have experienced a technical issue with the form and have temporarily removed the ability to submit any form containing personal information online for checking. A technical solution to the issue will be put in place over the next few days," a Scarborough Building Society spokeswoman explained.

Scarborough Building Society was founded in 1846 and is the second oldest building society in the UK. The mutually owned financial organisation manages assets worth an estimated £2.9bn. ®

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.