Subscribe

Kalahari.net fixes flaw

By Itumeleng Mogaki, ITWeb junior journalist
Johannesburg, 17 Sept 2004

Online retailer Kalahari.net this morning repaired a flaw that allowed account holders to view other customers` personal details.

The flaw allowed users to view the order history of other account holders, tracking numbers of parcels, as well as addresses and telephone numbers.

The problem was detected by a Kalahari.net user who reported it to ITWeb after an e-mail sent to the company`s support centre failed to elicit a reply after two weeks.

"This is not a security or fraud issue," says Gary Hadfield, commercial manager of Kalahari.net. "No one has been able to get hold of our customers` credit or payment details."

He says the reason the customer service department had not responded to the e-mail was that it was not logged with its customer relationship management system.

"Obviously this is a technical glitch a customer picked up and our customer service didn`t."

Brian Harding, marketing director of Software Futures - the company that handles Kalahari.net`s IT software development - emphasises that there was no fraud, and all the details that could be accessed were available only for a short period.

"As soon as were notified, the problem was corrected. We have had a long successful relationship with Kalahari.net and this is the first time we have experienced a problem of this nature. We have obviously looked at adjusting procedures and processes to ensure that this type of thing does not happen in the future," says Harding.

Share