Sage Pay card stroker goes titsup for NINE hours
1,000 email addresses leaked in outage apology
Agentless Backup is Not a Myth
Sage Pay's card payment system choked up yesterday for nine hours in an intermittent outage that affected its 30,000 customers in the UK and Europe.
Sage first alerted customers to an error at 1.39pm yesterday afternoon, then finally posted the all-clear after 10pm last night.
A Reg reader also flagged up another snafu by the enterprise software group when it attempted to deal with the outage: the firm apparently sent an apology mail to over 1,000 of its business customers with everybody's email addresses copied into the CC field.
The email explained that "transactions are appearing to timeout at the authorisation stage".
Commenting today, Sage wouldn't give details on the nature of the problem, but said that it had been fixed and was being examined.
"The technical issues have been resolved and we are conducting a full review".
The email slip up was due to "human error", said the spokesperson:
Unfortunately due to human error during the day, a technical update email to a select number of our business customers was sent that contained email addresses of some other business customers.
These email addresses were business contacts and no other data was shared. We have since put processes in place to stop this from happening again.
Sage also apologised to customers and said that during these issues there was no incident of any card data or transaction information being lost or compromised. ®
COMMENTS
How about configuring your mail server...
to mangle the headers so that all addresses are BCC'd, even if the user screws up, and then configure your firewall to not allow any SMTP out the door unless it's from said server?
So Sage Pay is almost as bad as their accounting software then.
No point complaining if you don't plan for this
Shit happens, it shouldn't, but it does. If online payments are mission critical to your business then why put all your eggs in the same payment gateway's basket. At least have a fallback payment processor for the day the sky falls in.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Enabling efficient data center monitoring
