Home
 » ISP News » 
Sponsored Links

BT Shuns Phone Privacy Bug that Exposes UK Customers to Abuse

Tuesday, Nov 27th, 2012 (1:32 pm) - Score 652

BT has been accused of negligence after one of its customers discovered that the national telecoms operator had made it easy for anybody to gain access to personal customer account names and add unwanted services to another user’s phone line without their permission.

The flaw, which we were easily able to verify with a friends service, allows anybody with the phone number and postcode of a particular property to change the subscription service and gain access to additional personal details (full name of the account holder) through BT’s online “Upgrade your Calling Plan” service.

Advertisement

It goes without saying that such an easily accessible system with no firm security checks, except a basic check-box, could be abused for malicious purposes, although so far BT have only agreed to remove the account holders name from its public display.

A BT Spokesperson said (The Register):

Different levels of security apply to different products. Where judged as appropriate, for the purpose of customer convenience we do allow a limited number of services to be ordered online using the phone number and postcode.

It should not have been possible to view the name of the account holder by entering just the phone number and postcode. Thank you very much for bringing this to our attention, we have taken the appropriate action to close this issue.”

Apparently knowing the phone number and postcode of a property, which can easily be found via the phone directory, is all the security that customers need. So far as we’re aware the vast majority of other telecoms operators and broadband ISPs tend to require at least a username and password before allowing anybody to make similar changes to their services, which is a more sensible approach.

Mark-Jackson
By Mark Jackson
Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook and .
Search ISP News
Search ISP Listings
Search ISP Reviews

Comments are closed

Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
150Mbps
Gift: None
NOW UK ISP Logo
NOW £25.00
100Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £26.00
132Mbps
Gift: None
Vodafone UK ISP Logo
Vodafone £26.50 - 27.00
150Mbps
Gift: None
Plusnet UK ISP Logo
Plusnet £27.99
145Mbps
Gift: None
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
200Mbps
Gift: None
BeFibre UK ISP Logo
BeFibre £19.00
150Mbps
Gift: None
Community Fibre UK ISP Logo
150Mbps
Gift: None
YouFibre UK ISP Logo
YouFibre £22.99
150Mbps
Gift: None
Hey! Broadband UK ISP Logo
150Mbps
Gift: None
Large Availability | View All
The Top 15 Category Tags
  1. FTTP (5713)
  2. BT (3565)
  3. Politics (2598)
  4. Openreach (2341)
  5. Business (2322)
  6. Building Digital UK (2275)
  7. FTTC (2060)
  8. Mobile Broadband (2038)
  9. Statistics (1829)
  10. 4G (1723)
  11. Virgin Media (1674)
  12. Ofcom Regulation (1491)
  13. Fibre Optic (1424)
  14. Wireless Internet (1417)
  15. FTTH (1383)
Promotion
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules , Contact
Mastodon