Bundle account holders’ details unbundled in public.
Detailed information about Telstra’s customer accounts – including usernames and passwords – has been found to be sitting on the open web for anyone to access via a Google search.
A user of the Whirlpool forum discovered the “Telstra Bundles request search” page after doing a web search for a Telstra customer support phone number they were told to contact.
Anyone who visits the page can search Telstra’s customer database based on the customer’s last name, account number, sales force ID or reference number.
Read more: Sydney Morning Herald, December 9, 2011