eThekwini municipality website leaks user data - expert

(File, Twitter)
(File, Twitter)

Johannesburg - KwaZulu-Natal's eThekwini municipality e-services website is hackable with residents’ personal information such as ID numbers and other data being exposed with just the change of a web address, according to an expert.

READ: eThekwini shuts down e-services after user data leak

Local software developer, Taylor Gibb, has said that by simply changing a part of the web URL on the eThekwini website, full details on users can be seen. Gibb outlines this in a blog post that he wrote and posted on Thursday.

Gibb told Fin24 that it was a trivial task for someone who knew "a thing or two about computers".

“The first problem I noticed is that they emailed all users their usernames and passwords, which meant they are storing our data in plain text,” Gibb from Durban said. 

“This prompted me to investigate further. What I found was shocking. By changing a single portion of the URL, you are able to see full details for any other registered user on the system. You can see their email, ID number, deceased status, gender, account number and cellphone number,” he added.

“The government has an obligation to protect our data, and I have an obligation to alert you that your data is not safe,” he said.

“In a matter of minutes, someone could have all their information at their fingertips. The code to dump their entire database, which contains everyone’s personal information would be less than 10 lines of code,” Gibb added.

Fin24 approached eThekwini officials for comment but the municipality did not immediately respond.

Instead, the municipality told Gibb on Twitter: "We are looking into this. Sorry about that."

Are you an eThekwini resident and what are your views on this? Tell us by clicking here.

The municipality just after 13:40 on Thursday then said on Twitter that it was moving to take the website offline to beef up its security.

@KyleVenktess on Twitter.

We live in a world where facts and fiction get blurred
In times of uncertainty you need journalism you can trust. For only R75 per month, you have access to a world of in-depth analyses, investigative journalism, top opinions and a range of features. Journalism strengthens democracy. Invest in the future today.
Subscribe to News24
USD/ZAR
14.59
(+0.1)
GBP/ZAR
20.03
(-0.0)
EUR/ZAR
17.35
(-0.1)
AUD/ZAR
11.08
(-0.3)
JPY/ZAR
0.13
(-0.2)
Gold
1,731.85
(-0.1)
Silver
24.86
(+0.2)
Platinum
1,172.50
(-0.1)
Brent Crude
63.28
(+0.5)
Palladium
2,681.00
(+0.1)
All Share
66,390
(0.0)
Top 40
60,673
(0.0)
Financial 15
12,144
(0.0)
Industrial 25
86,617
(0.0)
Resource 10
67,175
(0.0)
All JSE data delayed by at least 15 minutes Iress logo
Company Snapshot
Voting Booth
Please select an option Oops! Something went wrong, please try again later.
Results
Yes, and I've gotten it.
21% - 1249 votes
No, I did not.
52% - 3118 votes
My landlord refused
28% - 1678 votes
Vote