Cahoot hit by web security scare
A security loophole at internet bank Cahoot allowed customers to access other people's accounts, a BBC investigation has revealed.
The website, run by Abbey bank, was closed down for 10 hours on Thursday to carry out urgent repairs. The site has now reopened and the bank says the problem, which was caused by a system upgrade, has been fixed. Cahoot apologised for the breach, but said hackers would not have been able to move money between accounts. The investigation, by BBC Breakfast, followed a tip-off from a viewer, who found he could access the site with only a user name. Tim Sawyer, head of Cahoot bank, said it needed to learn lessons from the security breach, which he said had been caused during a system upgrade 12 days ago. "I believe that we need to look closely at our processes because this has not been our greatest moment," Mr Sawyer said. "We did not fail as an organisation because there was no risk of financial loss, but we do need to learn lessons from this."
Reproduced from an article published by BBC News
© BBC News
The original article can be viewed here:
http://news.bbc.co.uk/1/hi/business/3984845.stm
Permalink Bookmark Digg this story
