Cape Town – The City of Joburg has come under fire for a security flaw that may have compromised ratepayer information, a report says.

According to a report on MyBroadband, the online services system reveals names, addresses, account numbers, PIN codes and financial details to anyone with an internet connection.

“I honestly tried to report it to the COJ, but their call centre could not assist. I then sent them an e-mail but I don’t anticipate that something will happen quickly there,” an anonymous user who discovered the flaw reported.

The flaw concerns the viewing of invoices online, but it is claimed that the service is not password protected.

According to an Ekurhuleni resident the same vulnerability exists in the Ekurhuleni Municipality’s online system, but it requires a user to log in before being able to access the invoices.

– News24