- Related Stories
-
Egghead says hacker didn't get access to cards
January 8, 2001 -
Egghead tight-lipped about hack investigation
December 26, 2000 -
Company says extortion try exposes thousands of card numbers
December 12, 2000 -
Eve.com scrambles to assess security breach
September 13, 2000 -
Gaffe at Amazon leaves email addresses exposed
September 6, 2000 -
IKEA exposes customer information on catalog site
September 6, 2000
Names, addresses, phone numbers and e-mail addresses of Travelocity customers who participated in a promotion on its site were exposed. Travelocity executives closed the breach, which involved an insecure directory, on Monday afternoon after it was pointed out.
For more than a month, up to 51,000 names could have been exposed by the breach, said Jim Marsicano, executive vice president of sales and service for Travelocity. Blaming the problem on human error, Marsicano stressed that no customer order information was compromised by the security hole.
"We take this privacy thing very seriously," Mariscano said. But he added, "In this case, we didn't do what we were supposed to do."
Although Travelocity is still investigating the incident, Marsicano said that it stemmed from the transfer of the company's servers from San Francisco to Tulsa last month. As part of the move, some of the company's internal data from two promotional contests that ran last year was inadvertently left on a computer that is now being used as a Web server, he said.
"We had a weak link in this particular transaction and you see the end result," he said.
These kinds of breaches occur when a company gets complacent about security risks, said Richard Power, editorial director of the Computer Security Institute.
"This is an error (of) not dotting their I's or crossing their T's," Power said. "This is a situation where they are probably understaffed, or they haven't understood that they are at risk of somebody poking around."
Travelocity is only the latest site to compromise customer information.
Last month, a hacker broke into Egghead.com, potentially exposing its 3.7 million customer accounts. Weeks later, the company said the hacker didn't gain access to any of the credit card numbers it had on file, but by then many of the credit cards had been canceled by banks or worried customers.
Earlier last year, security breaches or hacker attacks exposed customer and client information at CreditCards.com, Eve.com, IKEA and Amazon.com.
An e-commerce executive, who asked to remain anonymous, reported the security hole to CNET News.com on Monday. The insecure directory allowed anyone to see the customer data without a password.
Travelocity's Web site assures customers of the site's security, saying it uses "the latest encryption technology to ensure that every transaction is safe." The company said it encrypts all personal information after it is entered and transmits the encrypted information over the Internet to a secure server, where it is translated back to its original form and stored in an offline database.
Simple errors like the Travelocity breach have happened all too frequently, said Jason Catlett, president of the spam-fighting group Junkbusters. They stem from companies not devoting enough financial resources and technical expertise to addressing security issues, he said.
"Of course these mistakes shouldn't happen," Catlett said. "There's a rush to be first with a new feature and to get the promotion running rather than making sure all of the doors are locked before they open the front gate."







Having found that Travelocity had charged me twice for the flight I booked my parents for Christmas, I made the misguided assumption that it would easily be resolved. All I had to do was contact Travelocity customer service and have them credit my account. Simple enough, right? Sure, if a customer service department existed which, as far as I can discern, does not. I have just lost two hours of my life listening to crumby on hold music and I am yet to speak to someone. It has been perhaps one of the most frustrating experiences of my life. I just want to speak to someone, anyone!!! My advice to all travellers considering an online travel agent is to avoid Travelocity like the plague. If they don't value their customers enough to have a feasible customer service department, then they are not deserving of our custom.
I tried to make a change to an existing reservation over the phone and got to speak to 5 different people repeating over and over my request, people that not only hardly speak and understand English, but have reasoning abilities of a 5 year old. I was held on the phone for 3 hours and 45 minutes and was given more than 10 different rates for the exchange of the date of departure. In the end, the rate came up to $480.00 exchange fee for a ticket that I initially paid $780.00. I decided to just cancel the ticket for a $200.00 penalty and went and purchased new ticket from the airline website for $750.00. I was suppose to receive $580 back, however, the promised $580.00 showed up on my credit card 6 weeks later as $520.00. The Travelocity customer service reps are rude and dishonest, and hopefully Travelocity will decide to move its customer service out of India or there will be more and more dissatisfied customers. I know that I and all the people that I have talked to will not use Travelocity any more.
As I am writing this there is no 4!!! sets of tickets plus a number of fees charged to my debit card totaling over $1,300!! you can bet I will stop these charges through my bank. I finally realized that travelocity is an insane waste of time and got my tickets for the same amount of money in about 10 minutes from Orbitz.
Anyway, I don't expect any remedy on this situation from them because as I said you have to worst costumer service ever.
It is fraud however, so the next call I make will be to the police ( After the bank that is )
http://www.canbilteknoloji.com
http://www.can-bil.com
http://www.online-shopp.net
http://www.ankarabilgisayar.blogcu.com
http://www.ankarapcgames.blogcu.com
- by suomussalmi August 23, 2009 12:47 AM PDT
- I get email from Travel Services, Tampa Florida! They have promised free gruising on Bahama islands. They have also promised me a cheque value of euros 1625,00 and visa card!
- Like this Reply to this comment
-
(15 Comments)Could You please inform me what is the situation on this affair? The Transaction number of my journey is as follows: 31208097 and the Transaction number of my cheque is as follows: 20183348133. Please inform me as soon as possible!
Kindly Regards!
Antti Johannes Vaalama
email: ajvaalama@gmail.com
GSM: +358-0466552279