Service NSW has issued an apology following a software glitch that briefly allowed users to view each other’s information on the “My Services” dashboard.
The issue was present between 1.20 pm and 3 pm on March 20th and was limited to the landing dashboard when customers logged in via the website.
No issues were identified with the Service NSW mobile application. The incident was not a cyber attack, and the NSW Information and Privacy Commission, as well as the affected customers, were notified on the day of the incident.
Although the issue may have impacted 3,700 users, the Service NSW spokesperson confirmed that “any personal information available through your linked services was only available to another logged-in user for a short period of time and was not searchable”. A review of the incident is continuing to prevent similar incidents.