WHID 2006-16: AstraTel customer call records leaked

A security hole in Sydney internet provider Astratel's LiveBilling online account management system has seriously compromised its customers' privacy.

The service redirected users to a different server and propagated the user information in a hidden field without re-authenticating.

Additional information:

• Privacy breach at ISP [Australian IT, Mar 31 2006]
• AstraTel customer call records leaked [Public Forum, Mar 31 2006]