Data breach after lax New Zealand Transport Agency (NZTA) security

guest · Sep 9, 2019

Data breach after lax NZTA security
September 9, 2019
https://www.stuff.co.nz/business/115645154/data-breach-after-lax-nzta-security

The New Zealand Transport Agency (NZTA) has admitted to a technology botch up leaving what was meant to be a highly secure data key wide open.

"The transport agency can confirm the Google API was incorrectly left open as part of the Traffic Watcher pre-production set up," NZTA said in statement.
The key is a unique code used to access data from Google's application programming interface (API), in this case through 2018 and in early 2019. It was used to build Traffic Watcher, an online tool for transport operations centres, maintenance contractors and the police.

Sources familiar with the system said when Traffic Watcher was soft-launched in early 2019 this unique key was hardcoded into it, so those with simple IT skills could view and copy it.
There is industry speculation that misuse of the API key was widespread, that contractors took the key's details with them when they left, and that the bill being sheeted back to NZTA was high.
The agency denies this [...]
Click to expand...

Log in or Sign up

Data breach after lax New Zealand Transport Agency (NZTA) security

guest Guest

Log in or Sign up

Data breach after lax New Zealand Transport Agency (NZTA) security

guest Guest

Useful Searches