News

Security slip on vouchers

Busy Bees' childcare voucher website was taken down last week after a parent exposed a glitch in the system which could reveal customers' bank details.

Dr Nick Gibbins, a lecturer in computer science at SouthamptonUniversity, found that upon clicking on the area for registered users, amenu popped up giving access to data in the database. He alerted BusyBees, who immediately took that area off the site.

Lucy Newcombe, Busy Bees vouchers PR manager, said, 'Busy Bees apologiseprofusely for any inconvenience we have caused our registeredusers.'

She told Nursery World changes were being made to improve the site'sperformance when a minor bug was introduced which led to a security holein the area of the site for registered parents and carers.

It was about 12 hours before the error was noticed. A new site will beput in place this week.

Ms Newcombe added, 'Our IT experts have looked at activity during thattime and we're confident that no client data was compromised.'



Nursery World Jobs

Early Years Educators

East Dulwich, South London

Early Years Leader

Selected Resorts across Greece, Sardinia and Croatia