Latest in Gear

Image credit:

US government payment site leaks 14 million customer records

GovPayNow.com says customers are safe, despite the breach.
Rachel England, @rachel_england
September 18, 2018
Share
Tweet
Share

Sponsored Links

Getty Images/iStockphoto

Government Payment Service Inc -- the company thousands of local governments in the US use to accept online payments for everything from court-ordered fines and licensing fees -- has compromised more than 14 million customer records dating back to 2012, KrebsOnSecurity reports. According to the security investigation site, the leaked information includes names, addresses, phone numbers and the last four digits of credit cards.

KrebsOnSecurity alerted the company -- which does business as GovPayNow.com -- to the problem on September 14th. The site found that it was possible to view millions of customer records simply by tweaking the digits in the web address displayed by each receipt. Two days later, the payment site released a statement saying it had addressed a "potential issue," and that while there was "no indication that any improperly accessed information was used to harm any customer" the company has nonetheless updates its systems to prevent the issue reoccurring.

Government Payment Services Inc was acquired by Securus Technologies at the start of 2018. The Texas-based company provides telecommunications services to prisons, among other things, and has come under fire a number of times for data breaches this year alone. In May, it emerged that Securus was abusing its cell phone-tracking capabilities, then just weeks later hackers broke into its system and stole the online credentials of multiple law enforcement officials. As KrebsOnSecurity notes, fixing these information disclosure issues is relatively simple, so it's remarkable how many organizations are falling foul of these basic vulnerabilities -- especially if their name, 'Securus' suggests they should really be on top of their game.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Engadget's 2020 Back-to-School Guide

Engadget's 2020 Back-to-School Guide

View
Xiaomi dives into Android TV dongles with a 1080p-capable Mi TV Stick

Xiaomi dives into Android TV dongles with a 1080p-capable Mi TV Stick

View
Peacock’s Android app doesn’t appear in Google Play search results

Peacock’s Android app doesn’t appear in Google Play search results

View
Zoom launches a line of hardware for home use

Zoom launches a line of hardware for home use

View
Facebook envisions using holographics for super-slim VR glasses

Facebook envisions using holographics for super-slim VR glasses

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr