Thursday, May 05, 2005

Boston.com / Business / Insurer's website error reveals data on drivers

Boston.com / Business / Insurer's website error reveals data on drivers: "Arbella Mutual Insurance Co. of Quincy was offering unrestricted access to the Registry of Motor Vehicles database through its own website until a Salem man noticed the security breach and raised concerns about the potential for identity theft.
Joel P. McNamee, 22, said he received some paperwork from his insurance agent over the weekend and noticed a website address at the bottom of one of the pages. The website, www.arbella.com/RegistryAccess/entry, gave him access to the Registry of Motor vehicles database.
He said he was able to look up anyone by name and obtain their address, date of birth, license number, and driving history. In most cases, he said, he was also able to obtain the driver's Social Security number by looking at their historical records."

No comments: