BT Business “leaky” customer details if a fault is open or recently closed.

Too long; didn’t read? Summary: BT Leak customer Name, e-mail address and mobile number against faults if you know the land line number.

I manage services for many people and came across this little glitch today.

If you raise a fault against a BT Business phone line you get regular status emails.
bt-fault-update-email

If you click the option to track your fault online you are taken to a simple URL containing just the phone number as verification. For example:

http://secure.business.bt.com/FaultManagement/Online/TrackYourFault.aspx?dn=01234548884

This then takes you to a page showing very limited information, just if the fault is resolved and the date it was reported.

bt-status-update-page

Clicking the “See details” option then prompts you for your account number to allow you to see further details.

account-details-prompt

A roadblock for those who don’t have your “personal / business” details.

HOWEVER… I had just been logged into another customer’s BT Business account tracking an order when I decided to check the status of the fault for another customer.

I clicked the tracking link in the e-mail and then clicked the See Details link.. this time, without the other customer’s account number OR BT Business login… I was able to see the details about the fault:

bt-showing-detailed-fault-status

That was curious enough.. but what stunned me next was what appears when I clicked the “See details” under the “Contact Details” column….

bt-leaking-info

It showed name, e-mail address and mobile number of the owner of the phone line with no requirement to prove who you are other than you too are a customer of BT Business and have a login!

Advertisements
This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s