Ontrack Data Recovery

News Feed

 

99p VPN connected to council network

Category: Data security

29 September, 2008

Kirklees council has been the latest victim of a data security breach after a second-hand virtual private network (VPN) kit sold on eBay automatically opened a connection to the council's private network, a report says.

Rather than the device needing network settings to be input, it connected to the last place it was used - Kirklees council, in West Yorkshire.

"The council is deeply concerned with this report but is confident that multiple layers of security have prevented access to systems and data," a Kirklees council spokesperson tells the BBC.

An investigation will get underway and until then the disposal process has been suspended, they add.

Capgemini, a managed services company which provided networking to the council until 2005, was found to own the IP address.

The device was sold on the auction site by Manga-Fu, which sells second-hand IT equipment, the BBC claims, which could question the data compliance of private firms working for local government.

A VPN encloses net traffic into an encrypted tunnel via a trusted server and prevents people from monitoring a local network or Wi-FI area, according to the register.ADNFCR-1851-ID-18802220-ADNFCR