Owners’ details leaked in online service video

MINI driver Andy realises dealer’s e-mail link to video of service on his car isn’t secure

Ensuring customer data is stored securely online is vital for businesses, with every collection of personal details a potential target for computer hackers.

As more aspects of car ownership go digital, there’s more and more information about owners and their cars available. One of the latest tools is video servicing, where garages provide drivers with a short clip of repairs and inspections.

Reader Andy Twine, from Reading, Berkshire, received one of these for a health check carried out during the service on his MINI Cooper from his local garage. The video was stored in a link sent via e-mail, with no password requirement, yet it contained details of Andy and his car.

Concerned, Andy did some digging and found a loophole in the software used, before contacting us to flag up the issue. The system in question was CitNOW, which allows dealers to quickly film and distribute videos to customers, whether they’re selling or servicing a car.

Andy told us: "I am able to easily view details and videos of other cars at garages nationwide.

"I can determine the name of the person, their car registration and which garage it is currently being serviced at. Any unsavoury characters with this information could then call the garage, say they would send someone else to pick up the car, and go to pick it up before the actual owner arrives."

We contacted CitNOW to reveal the loophole and, with Andy’s help, close it. Following several discussions, CitNOW informed us the technology had been updated to fix the security flaw. Andy also confirmed he was no longer able to access it.

A spokesman for the video platform told us: "CitNOW would like to thank your reader for flagging up this issue and encourages anyone in future to get in touch directly for the quickest possible resolution.

"CitNOW takes security and privacy concerns very seriously, and endeavours to rectify any issue as soon as possible. In this case, a fix was made available and deployed on to CitNOW’s global services, following notification of the technical details from your reader."

Most Popular

Best new car deals 2022: this week’s top car offers
Facelifted Volvo XC60 driving - front
Deals
1 Jul 2022

Best new car deals 2022: this week’s top car offers

Engine management light: top 5 causes of amber engine warning light
Engine management light: top 5 causes of amber engine warning light
Car technology
22 Jun 2022

Engine management light: top 5 causes of amber engine warning light

Top 10 cheapest electric cars 2022
2021 Citroen Ami
Best cars
16 Jun 2022

Top 10 cheapest electric cars 2022

Tips & advice

View All
Car dashboard warning lights: the complete guide
Car dashboard symbols and meanings
Tips and advice
23 Mar 2022

Car dashboard warning lights: the complete guide

Electric car charging stations: a complete guide
Electric car charging station
Tips and advice
5 Nov 2021

Electric car charging stations: a complete guide

PCP vs HP – which type of car finance is right for you?
PCP vs HP
Car buying
17 May 2022

PCP vs HP – which type of car finance is right for you?

Average speed cameras: how do they work?
Average speed cameras: how do they work?
Tips and advice
20 Jun 2022

Average speed cameras: how do they work?

Best cars

View All
Top 10 best car interiors 2022
Peugeot 208 hatchback
Best cars
25 Jun 2021

Top 10 best car interiors 2022

Top 10 best electric cars 2022
Ioniq 5
Best cars
25 Apr 2022

Top 10 best electric cars 2022

Top 10 best cheap-to-run cars 2022
Nissan Leaf front
Best cars
3 May 2022

Top 10 best cheap-to-run cars 2022

The UK's top 10 fastest hot hatchbacks 2022
Audi RS 3 driving - front view
Hot hatches
24 Jun 2022

The UK's top 10 fastest hot hatchbacks 2022