Blogger questions e-Filing security
Fauwaz Abdul AzizPublished: Apr 11, 2007 4:29 PM | Updated: Jan 29, 2008 6:21 PM
The sudden appearance of private financial and banking information belonging to strangers online has given the jitters to one blogger.
The sudden appearance of private financial and banking information belonging to strangers online has given the jitters to one blogger.
According to blogger Rikey, when he clicked the 'save and continue' button after filing his tax returns via the Inland Revenue Board Malaysia's (IRBM) e-Filing System, the page refreshed with another person's tax, bank and other financial information.
Upon repeating the process, Rikey said on his blog that he was able to see IRBM's 'private and confidential' details on an individual from Sabah as well as those of another person from Kuala Lumpur.
What other private and confidential information can be accidentally extracted when e-Filing tax returns with IRBM? asked Rikey, who runs the wattahack blog.
He was further shocked when a telephone call to one of the persons whose contact details were available on the web page revealed that the same thing had occurred to him.
"One wonders how many are actually facing this swapping of info?" he said.
"What if a robber or kidnapper gets some nice info on some Datuk's tax returns? He or she would know his particulars, the amount of money he earns yearly, the tax he declares as well as his bank account number.
"Once I saw this flaw I (got) worried it (would) be misused by hackers and we know Malaysia is well-known for hacking and online fraud," he added.
No complaints received
When contacted, an IRBM spokesperson said the board has not received any complaints or reports about the matter.
The spokesperson added that there have been no complaints pertaining to the security features of the e-Filing system that IRBM launched last month.
Meanwhile, IRBM corporate communications head Mazlan Wanchik said attempts to contact Rikey have yielded no response as he has refused to come forward or reveal his contact details.
"As far as we are concerned, the security of the e-Filing System is still intact, so there is no issue with us," he told malaysiakini.
Another IRBM source said officers from the board's information technology department had checked on the claims, but did not see a recurrence of the incident despite repeated attempts to simulate the process.
As of press time, Rikey could not be reached for comments.
According to blogger Rikey, when he clicked the 'save and continue' button after filing his tax returns via the Inland Revenue Board Malaysia's (IRBM) e-Filing System, the page refreshed with another person's tax, bank and other financial information.
Upon repeating the process, Rikey said on his blog that he was able to see IRBM's 'private and confidential' details on an individual from Sabah as well as those of another person from Kuala Lumpur.
What other private and confidential information can be accidentally extracted when e-Filing tax returns with IRBM? asked Rikey, who runs the wattahack blog.
He was further shocked when a telephone call to one of the persons whose contact details were available on the web page revealed that the same thing had occurred to him.
"One wonders how many are actually facing this swapping of info?" he said.
"What if a robber or kidnapper gets some nice info on some Datuk's tax returns? He or she would know his particulars, the amount of money he earns yearly, the tax he declares as well as his bank account number.
"Once I saw this flaw I (got) worried it (would) be misused by hackers and we know Malaysia is well-known for hacking and online fraud," he added.
No complaints received
When contacted, an IRBM spokesperson said the board has not received any complaints or reports about the matter.
The spokesperson added that there have been no complaints pertaining to the security features of the e-Filing system that IRBM launched last month.
Meanwhile, IRBM corporate communications head Mazlan Wanchik said attempts to contact Rikey have yielded no response as he has refused to come forward or reveal his contact details.
"As far as we are concerned, the security of the e-Filing System is still intact, so there is no issue with us," he told malaysiakini.
Another IRBM source said officers from the board's information technology department had checked on the claims, but did not see a recurrence of the incident despite repeated attempts to simulate the process.
As of press time, Rikey could not be reached for comments.
View Comments0