Search This Blog

Showing posts with label Technical Glitch. Show all posts

Glitch in Tax Service Exposed 1.2 Million Danes' CPR Numbers

A bug in the TastSelv Borger tax service which falls under the management of the US company DXC Technology has exposed almost 1.2 million CPR numbers of Danish citizens to the American multinational companies – Google and Adobe. The leak has been discovered by The Danish Agency for Development and Simplification for the first time, however, the researchers claim that CPR numbers along with other sensitive information have been exposed for around 5 years now.

People who have a tax liability to Denmark are allowed by TastSelv's services to see and alter their tax returns, annual statements and pay residual tax. As per the findings of the security researchers at the agency, all the exposed data was found to be encrypted and hence reportedly, Google and Adobe were not able to view the same due to encryption which barred them.

Other sources have it that in an attempt to downplay the entire incident, The Danish Agency for Development and Simplification put forth a solid confirmation on the CPR numbers being encrypted when accessed by the companies. Meanwhile, cybersecurity specialist and founder of the CSIS group, Peter Kruse asserted that Google did access those 1.2 million CPR numbers as there was no encryption, according to him the numbers were rather in plain text.

How was the glitch exploited?

It was when the users who were logged into TastSelv Borger happened to click on the text displayed as 'Correct contact information' and consequently rectified the contact information, faced an error in the app. The error triggered the process of transferring the CPR numbers to Google and Adobe, as per DR news website.

Referencing from the statement given by the government agency, “We take this kind of case very seriously. And of course, we need to be able to make sure that our suppliers handle all data according to applicable law and within the framework agreed upon with them.”

“The data received by Google is unencrypted. Google has been able to read data in unencrypted form,” he added.

“Google Hosted Libraries have been designed to remove all information that allows identifying users before logging on. Thus, no user information is shared with Google in this process.” Google told the website which first reported the incident.

Several Major US Airlines Experience Significant Delays After A Computer Glitch Causes Flight Disruptions Nationwide

As per the Federal Aviation Administration because of an issue called AeroData, used to ascertain the weight and balance of flights before departure the Southwest, Delta, United, JetBlue and The Alaska Airlines were compelled to ground or delay.

The glitch prompted nearly 3,400 flight delays by midday Monday at airports in New York City, Boston, Chicago, Detroit and Washington, DC, Dallas, Charlotte, Atlanta and Miami, according to FlightAware's MiseryMap.

In any case, the number of delays brought about by the AeroData issue, are still unclear.

More than 3,400 flights had been delayed nationwide as of midday Monday, including a large percentage of flights at airports in New York City, Boston, Chicago and Washington, DC. FlightAware's MiseryMap delay tracker is seen above

American Airlines revealed that a couple of its provincial bearers - which incorporate     Air Inc., Piedmont Airlines Inc., PSA Airlines Inc., Compass, Mesa, Republic and SkyWest-had been influenced, however it is indistinct which.

American said in a statement, 'AeroData is currently experiencing a technical issue that is impacting multiple carriers, including a few of our regional carrier and is working to resolve the issue as quickly as possible; we apologize to our customers for the inconvenience caused.'

While United and Delta reported on Twitter that the blackout incidentally obstructed their capacity to print release paperwork, the passengers took to social media to express their dissatisfaction and frustration, with a couple of addressing and questioning whether or not the delays were a some addled April Fools joke.

The FAA nonetheless recommends the travellers to contact their respective airlines directly for any further updates.

Defense Ministry website hit by glitch, not hacked, says Govt

Several government websites, including the Indian Defence Ministry’s website, were on Friday believed to be hacked after they showed a chinese character and an error message. The government said that the error was not caused by a hack, but by a technical glitch.

On Friday, Defense Minister Nirmala Sitharaman tweeted that “action is initiated after hacking” of the Ministry of Defense website and that it will be restored shortly.

Later on the same day, the Ministry of Electronics and IT issued a statement saying that the websites had in fact not been hacked but were affected by a “technical issue in storage.”

“The site showed what appeared to be a Chinese character and it was understandable that the site was perceived to be hacked,” the government said in the statement. “However, it has since been identified that the sites have not been hacked.”

The websites affected by the glitch were hosted in the NIC data centre (National Informatics Centre) and about 10 government websites became inaccessible to the public.

The websites that were affected include Ministry of Defence, MHA, Department of Public Enterprises, Election Commission, EPFO, Ministry of Labor, and Department of Science & Technology.