Feeds

Oz DNA tester’s privacy shocker

Some people shouldn't be let near Web servers

  • alert
  • submit to reddit

Top three mobile application threats

In a facepalm, forehead-slap, hang-your-head-in-shame howler, South Australian DNA testing company Medvet has left its online customer accounts system open to being indexed by Google.

As reported by The Australian, the search engine’s crawlers have dutifully recorded customer invoices including addresses and, in some cases, names.

Medvet’s managing director is reportedly seeking information from the company’s software supplier, rather than staging a public hanging of whoever set up robots.txt on its Website.

Although the SA government-owned company is trying to take action, it seems at sixes and sevens about what to do, telling the Oz it would conduct a full “security vetting” of the system, but not mentioning whether or not it would get in touch with Google to ask whether the search results can be removed.

At the time of writing, The Register was able to confirm that the search results remained in the Google cache (below).

Redacted version of Google cache results for Medvet.

Even without names, the privacy breach is disturbingly creepy: "That's my address, but I didn't order a paternity test / drug test - who did and why?"

While no test results appear in the searches, the privacy breach is serious enough for Australia’s Privacy Commissioner Tim Pilgrim to launch an investigation.

According to The Australian, Medvet was first told of the privacy breach in April. ®

3 Big data security analytics techniques

More from The Register

next story
Red-faced LOHAN team 'fesses up in blown SPEARS fuse fiasco
Standing in the corner, big pointy 'D' hats
KILLER SPONGES menacing California coastline
Surfers are safe, crustaceans less so
Opportunity selfie: Martian winds have given the spunky ol' rover a spring cleaning
Power levels up 70 per cent as the rover keeps on truckin'
KILLER ROBOTS, DNA TAMPERING and PEEPING CYBORGS: the future looks bright!
Americans optimistic about technology despite being afraid of EVERYTHING
Discovery time for 200m WONDER MATERIALS shaved from 4 MILLENNIA... to 4 years
Alloy, Alloy: Boffins in speed-classification breakthrough
Liftoff! SpaceX Falcon 9 lifts Dragon on third resupply mission to ISS
SpaceX snaps smartly into one-second launch window
Elon Musk's LEAKY THRUSTER gas stalls Space Station supply run
Helium seeps from Falcon 9 first stage, delays new legs for NASA robonaut
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.