News

Security slip on vouchers

Busy Bees' childcare voucher website was taken down last week after a parent exposed a glitch in the system which could reveal customers' bank details.

Dr Nick Gibbins, a lecturer in computer science at SouthamptonUniversity, found that upon clicking on the area for registered users, amenu popped up giving access to data in the database. He alerted BusyBees, who immediately took that area off the site.

Lucy Newcombe, Busy Bees vouchers PR manager, said, 'Busy Bees apologiseprofusely for any inconvenience we have caused our registeredusers.'

She told Nursery World changes were being made to improve the site'sperformance when a minor bug was introduced which led to a security holein the area of the site for registered parents and carers.

It was about 12 hours before the error was noticed. A new site will beput in place this week.

Register now to continue reading

Thank you for visiting Nursery World and making use of our archive of more than 35,000 expert features, subject guides, case studies and policy updates. Why not register today and enjoy the following great benefits:

What's included

  • Free access to 4 subscriber-only articles per month

  • Unlimited access to news and opinion

  • Email newsletter providing activity ideas, best practice and breaking news

Register

Already have an account? Sign in here