99p VPN connected to council network
Category: Data security
29 September, 2008
Kirklees council has been the latest victim of a
data security breach after a second-hand virtual private network (VPN) kit sold on eBay automatically opened a connection to the council's private network, a report says.
Rather than the device needing network settings to be input, it connected to the last place it was used - Kirklees council, in West Yorkshire.
"The council is deeply concerned with this report but is confident that multiple layers of security have prevented access to systems and data," a Kirklees council spokesperson tells the BBC.
An investigation will get underway and until then the disposal process has been suspended, they add.
Capgemini, a managed services company which provided networking to the council until 2005, was found to own the IP address.
The device was sold on the auction site by Manga-Fu, which sells second-hand IT equipment, the BBC claims, which could question the
data compliance of private firms working for local government.
A VPN encloses net traffic into an encrypted tunnel via a trusted server and prevents people from monitoring a local network or Wi-FI area, according to the register.