Owners’ details leaked in online service video

MINI driver Andy realises dealer’s e-mail link to video of service on his car isn’t secure

Ensuring customer data is stored securely online is vital for businesses, with every collection of personal details a potential target for computer hackers.

As more aspects of car ownership go digital, there’s more and more information about owners and their cars available. One of the latest tools is video servicing, where garages provide drivers with a short clip of repairs and inspections.

Reader Andy Twine, from Reading, Berkshire, received one of these for a health check carried out during the service on his MINI Cooper from his local garage. The video was stored in a link sent via e-mail, with no password requirement, yet it contained details of Andy and his car.

Concerned, Andy did some digging and found a loophole in the software used, before contacting us to flag up the issue. The system in question was CitNOW, which allows dealers to quickly film and distribute videos to customers, whether they’re selling or servicing a car.

Andy told us: "I am able to easily view details and videos of other cars at garages nationwide.

"I can determine the name of the person, their car registration and which garage it is currently being serviced at. Any unsavoury characters with this information could then call the garage, say they would send someone else to pick up the car, and go to pick it up before the actual owner arrives."

We contacted CitNOW to reveal the loophole and, with Andy’s help, close it. Following several discussions, CitNOW informed us the technology had been updated to fix the security flaw. Andy also confirmed he was no longer able to access it.

A spokesman for the video platform told us: "CitNOW would like to thank your reader for flagging up this issue and encourages anyone in future to get in touch directly for the quickest possible resolution.

"CitNOW takes security and privacy concerns very seriously, and endeavours to rectify any issue as soon as possible. In this case, a fix was made available and deployed on to CitNOW’s global services, following notification of the technical details from your reader."

Most Popular

Hot car deal: sporty Skoda Octavia vRS Estate for £278 a month
octavia vrs hot deal
Deals
19 Feb 2024

Hot car deal: sporty Skoda Octavia vRS Estate for £278 a month

All-new KGM Torres is a £35k SUV from reborn SsangYong
KGM Torres front quarter
News
19 Feb 2024

All-new KGM Torres is a £35k SUV from reborn SsangYong

Hot car deal: racy Cupra Ateca SUV for just £234 a month
cupra ateca
Deals
16 Feb 2024

Hot car deal: racy Cupra Ateca SUV for just £234 a month

Tips & advice

View All
Car dashboard warning lights: the complete guide
Car dashboard symbols and meanings
Tips and advice
19 Dec 2023

Car dashboard warning lights: the complete guide

Electric car charging stations: a complete guide
Public EV charge point
Tips and advice
11 Jan 2023

Electric car charging stations: a complete guide

PCP vs HP – which type of car finance is right for you?
PCP vs HP
Tips and advice
17 May 2022

PCP vs HP – which type of car finance is right for you?

Average speed cameras: how do they work?
Average speed cameras: how do they work?
Tips and advice
12 Apr 2023

Average speed cameras: how do they work?

Best cars

View All
Top 10 best car interiors
Peugeot 208 hatchback
Best cars
25 Jun 2021

Top 10 best car interiors

Top 10 best electric cars 2024
The best electric cars 2023
Best cars
2 Jan 2024

Top 10 best electric cars 2024

Top 10 best cheap-to-run cars 2024
The best cheap-to-run cars 2023
Best cars
2 Jan 2024

Top 10 best cheap-to-run cars 2024

The UK's top 10 fastest hot hatchbacks 2024
Fastest hot hatchbacks hero
Best cars
2 Jan 2024

The UK's top 10 fastest hot hatchbacks 2024