Access to thousands invoices including address data in the PostOffice shop possible. After note by onlinekosten.de, privacy gap fixed promptly. Hurth near Cologne, 11 November 2009 a data protection gap has access to thousands of invoices until November 9, 2009 and by customers of the PostOffice shop on the Internet allows you to address. According to a note from onlinekosten.de fixed by Deutsche Post AG as a competent operator within 24 hours. The PostOffice shop offers postage for letter mail and parcels mainly office supplies and computer accessories for business customers. By simply editing of a Web address were unauthorized able to see the order history of other customers of the Internet shop without their own registration.
Similarly as with other recently reported cases here merely the change of an ID in the address bar of the browser was necessary. The orderID parameter was replacing some digits to manipulate, that personal data of other buyers available were. Shown were both billing and shipping address, the products ordered including price as the selected type of payment and the date of dispatch. Cannot be read, however, were corporate or customer name and account or credit card information. According to a note from onlinekosten.de on Monday (9 November), promptly responded to Deutsche Post AG and corrected the vulnerability within 24 hours.
The PostOffice shop is again fully available since Tuesday noon. To the extent of the data breakdown, Deutsche Post AG said it had acted to several thousand order overviews of corporate and business customers. Inferences about individuals or the personalization of data had been therefore not readily possible. “Only by chance an employee of our Technical Department has become attention last weekend on the privacy gap. In a common analysis we were surprised that we could access without detours or technical hurdles on the accounts of dozens of customers”, says Enrique gap, Editorial Director of onlinekosten.de. “The immediate intervention of Deutsche Post a positive signal is that privacy on the Internet is ever written.” About onlinekosten.de: with monthly 1.33 million visits and 784.000 unique visitors (source: Google Analytics, July 2009) is onlinekosten.de of one of the largest IT magazines in the German Internet. Onlinekosten.de make one of the top addresses for all those interested in Internet news, background reports and reports, as well as a large community with more than 55,000 registered users. Divided into different departments, onlinekosten.de intuitively offers a fast and effective selection of desired information around the topic of telecommunications. A core element of the portal is updated daily broadband calculator with over 1,400 rates in the areas of mobile Internet, DSL and cable. onlinekosten.de is a subsidiary of intergenia AG from Hurth near Cologne. Press contact: Hayo gap editorship Daimler Street 9-11 50354 Hurth phone: 02233/612-3901 fax: 02233/612-3902 email: Web:
