2degrees reveals other users personal information

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2degrees reveals other users personal information

guesr

7 posts

Wannabe Geek

#38839 5-Aug-2009 09:35

There is a major security problem with the "Your 2degrees" system.

When you go to click on "Your details", it seems to come up with filled in information about someone else, with a totally different username, including their full name, DOB, address, alternative contact number, and email!

The system seems to be messing up with understanding what my existing phone number is - the one i've been preset with - even what seems like a 2degrees employee.

I would suggest that you refrain from entering your personal details until this is fixed!

I've just reported this to 2degrees - only to have the customer rep reset my password for the Your 2degrees system. Lets see if this works.. (I have some doubt itll fix anything)

3g

341 posts

Ultimate Geek

#242856 5-Aug-2009 09:45

I reported this issue to them last night.

When did you see the problem?

Nigel H.

guesr

7 posts

Wannabe Geek

#242858 5-Aug-2009 09:49

This morning - approximately 30 mins ago at 9:10am

EDIT: For those trying to recreate this problem, in addition to just clicking on "Your details" there is an extra step which I won't post here until this gets fixed.

EDIT2: It seems like they've taken the server down. The customer representative said its now a wide known issue and they're fixing it.

3g

341 posts

Ultimate Geek

#242875 5-Aug-2009 10:09

They knew about it for over 12 hours.

Very disappointing

2degrees

178 posts

Master Geek

Trusted

#242878 5-Aug-2009 10:13

Hey Geekzoners,

Thanks for all your comments on this.

We have discovered a bug in the Your 2degrees and Online Store sections of our website and have taken them down temporarily.

The issue was only revealed yesterday due to the high volume of traffic that visited the site within a matter of hours. There were nearly 100,000 unique visitors on the site yesterday and the issue affected the web sessions of less than 100 people during this time.

Those people who experienced the issue were able to see only the contact details of another person on the site at the same time.

Above all else we value the privacy of our customers and so until resolved the Your 2degrees and the Online Store sections of our website will be unavailable until further notice.

No other 2degrees services are impacted by this issue. Customers are still able to purchase and activate SIMs, make calls and send texts.

Cheers!
2degrees

www.2degreesmobile.co.nz

CALL FREE 0800 022 022

EMAIL: info@2degreesmobile.co.nz

magu

Professional yak shaver
1599 posts

Uber Geek

Trusted

BitSignal

Lifetime subscriber

#242880 5-Aug-2009 10:22

Good. I was beginning to think about removing my Personal Info from my account until you guys got it right.

Word of advice, though: a bit more action on your Twitter account would be good. Since after launch yesterday it's been very, very quiet.

"Roads? Where we're going, we don't need roads." - Doc Emmet Brown

ahmad

1937 posts

Uber Geek
Inactive user

#242884 5-Aug-2009 10:27

Is this related to why we can only choose a nunmber starting with "0220"?

Will you be releasing the other number ranges when this is sorted out?

A lot of us have been hanging out for days under the impression "10 million numbers" would be available :(

magu

Professional yak shaver
1599 posts

Uber Geek

Trusted

BitSignal

Lifetime subscriber

#242912 5-Aug-2009 11:24

Being able to get an 022 2 xxxxx number is good enough. 022 4 xxxx, I'll love you guys long time.

"Roads? Where we're going, we don't need roads." - Doc Emmet Brown

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

TinyTim

1042 posts

Uber Geek

Trusted

#243107 5-Aug-2009 16:44

Hmm, 2Deg staff are using 022 2xx xxxx numbers.