Australia's GE Money warns customers of 'Heartbleed' bug

SYDNEY Tue Apr 15, 2014 1:54pm IST

The Canada Revenue Agency website is seen on a computer screen displaying information about an internet security vulnerability called the ''Heartbleed Bug'' in Toronto, April 9, 2014. REUTERS/Mark Blinch

The Canada Revenue Agency website is seen on a computer screen displaying information about an internet security vulnerability called the ''Heartbleed Bug'' in Toronto, April 9, 2014.

Credit: Reuters/Mark Blinch

Related Topics

Stocks

   

SYDNEY (Reuters) - Financial services firm GE Money has warned Australian customers against "worldwide internet vulnerabilities", urging them to change online passwords after a bug surfaced this month hitting email systems, security firewalls and possibly, mobile phones.

"Heartbleed" surfaced in April, when it was disclosed that a pernicious flaw in a widely used Web encryption program known as OpenSSL opened hundreds of thousands of websites to data theft.Developers rushed out patches to fix affected web servers when they disclosed the problem, which affected companies from Amazon.com Inc (AMZN.O) and Google Inc (GOOG.O) to Yahoo Inc (YHOO.O).

Yet pieces of vulnerable OpenSSL code can be found in several other locations, from email servers to ordinary PCs, phones and even security products, such as firewalls.

Developers of those products are scrambling to figure out whether they are vulnerable and patch them to safeguard users. [ID:nL2N0N11SC]

The Sydney Morning Herald reported that financial websites run by GE Money, including the Myer Visa Card and Myer Card portals, as well as Coles Mastercard, were vulnerable to the Heartbleed security bug.

Many of the affected websites have since been patched against Heartbleed or are in the process of being patched, the newspaper said.

Myer Visa Card and Coles Master Card online login pages have a security update that navigates to GE Money, which runs those financial websites, asking customers to change passwords.

"We have taken precautions and steps to protect the security of our customers’ data and we have no reason to believe any customer data has been compromised," a spokeswoman for GE said in a statement on Tuesday.

Realestate.com.au, a provider of real estate services, also sent customers a note over the weekend saying "Heartbleed" could threaten their accounts and advising them to create new passwords, according to a copy of the email obtained by Reuters.

(Reporting by Swati Pandey; Editing by Clarence Fernandez)

FILED UNDER:
Comments (0)
This discussion is now closed. We welcome comments on our articles for a limited period after their publication.

  • Most Popular
  • Most Shared

APPLE'S BUSINESS

TECH SHOWCASE

Privacy Lawsuit

Privacy Lawsuit

Google must face U.S. privacy lawsuit over commingled user data.  Full Article 

New Launch

New Launch

China's Xiaomi announces latest flagship Mi 4 smartphone.  Full Article 

Class Action

Class Action

Google must face class action over kids' in-apps purchases.  Full Article 

Black Hat Conference

Black Hat Conference

Talk on cracking Internet anonymity service Tor canceled.  Full Article 

Nano-Printing

Nano-Printing

Monet masterpiece shrunk down to the size of dust mite.  Video 

Losing Steam

Losing Steam

With sales sputtering, Apple's iPad looks to IBM alliance  Full Article 

N.Y. Forgery Trial

N.Y. Forgery Trial

Zuckerberg to testify at N.Y. forgery trial - prosecutors  Full Article 

Management Changes

Management Changes

BlackBerry names ex-Sybase executive as chief operating officer.  Full Article 

Reuters India Mobile

Reuters India Mobile

Get the latest news on the go. Visit Reuters India on your mobile device.  Full Coverage