Security slip on vouchers
Busy Bees' childcare voucher website was taken down last week after a parent exposed a glitch in the system which could reveal customers' bank details.
Dr Nick Gibbins, a lecturer in computer science at Southampton University, found that upon clicking on the area for registered users, a menu popped up giving access to data in the database. He alerted Busy Bees, who immediately took that area off the site.
Lucy Newcombe, Busy Bees vouchers PR manager, said, 'Busy Bees apologise profusely for any inconvenience we have caused our registered users.'
She told Nursery World changes were being made to improve the site's performance when a minor bug was introduced which led to a security hole in the area of the site for registered parents and carers.
It was about 12 hours before the error was noticed. A new site will be put in place this week.
Ms Newcombe added, 'Our IT experts have looked at activity during that time and we're confident that no client data was compromised.'
