Story image

Computer Lounge online store hit by security breach

05 Nov 2018
Twitter
Facebook

Auckland-based online computer parts store Computer Lounge has been affected by a security breach.

According to a report from Reddit user Brian McCarthy, the vulnerability had existed for months, but the company had failed to act on it until recently.

The vulnerability could have allowed somebody to extract personal information from the website, however the company says that no credit card details or passwords were compromised. Personal information can still be used for identity theft or be put up for sale on cybercrime marketplaces.

A notice published on the company’s website last weekend admits that Computer Lounge doesn’t know ‘the full extent of the data leaked’, but it is working with a team of data forensics specialists to find out.

“We take full responsibility and would like to assure the public we have done everything in our power to not only right this wrong, but to ensure that such an incident does not happen again,” the notice says. 

“We took down our website to ensure that any impact on our customers was minimised, and are we working with a new team of web developers to develop an updated, robust website, and look forward to sharing this with you very soon.”

Computer Lounge is working with CERT NZ, the Police and the Privacy Commission to mitigate the issue and minimise impact on customers.

A notice posted on Sunday November 4 says: “We would like to reassure our customers that while the site was down we have pushed updates which have fixed the vulnerability. We will keep you posted with any further updates should they be required.”

A number of high-profile security breaches involving New Zealand firms have hit the headlines this year, proving the old adage of ‘it’s not a case of if, but when’.

Earlier this year Z Energy announced that its Z Card online database was ‘accessed by a third party’ back in November 2017.

The third party may have accessed customer data but not bank information or anything that affects customer finances.

“Z takes its data privacy responsibility and threats to cyber security very seriously and is taking steps to ensure that the company learns from this incident,” the company stated at the time.

Vector’s Outage app was also breached this year. It leaked information belonging to 24,000 customers including names, emails, and postal addresses.

Facebook, Ticketmaster, TimeHop, and even the PyeongChang Winter Olympics have been affected by breaches this year.

Story image
14 Nov
Hands-on review: OPPO ENCO Q1 Wireless Noise Cancelling Headphones
The tone and clarity is brilliant. I’m just waiting to see how they cope with Barry Gibb’s falsetto. The melody and lyrics are clear with rich tones. Oh no! I can feel my feet tapping and my arms want to disco! Help! More
Story image
08 Nov
Samsung and Finder launch Aussie first with new credit card search feature
Samsung Electronics Australia and Finder have launched Promoted Cards, a new credit card shopping feature for Samsung Pay which provides Australians with different credit card offers from participating financial institutions.More
Story image
05 Nov
Adobe, New York Times and Twitter announce content authenticity initiative
Adobe is developing an opt-in system that will allow creators and publishers to securely attach attribution data to content they choose to share. More
Story image
08 Nov
Congratulations to all Skills Bright Sparks winners
Congrats to the young minds behind an app that allows families to control the time spent in the shower, and an app designed to help those who are visually impaired or colour blind to ‘read’ colours.More
Story image
13 Nov
Micro 3D printing technology wins NZ engineering award
Micromaker3D creates detailed submillimetre structures for applications such as sensors, wearables, point-of-care diagnostics, and micro-robotics.More
Story image
15 Nov
Hands-on review: Apple AirPods Pro
When considering the sound quality and vast list of features, the Apple AirPods Pro are worthy of both the higher price tag and the “Pro” title.More