Malaysian VEP site loophole exposes motorists' data

Malaysia blocks access following discovery by S'porean that data like passport info could be viewed

Malaysia's Vehicle Entry Permit scheme will be enforced in phases. The first phase, starting on Oct 1, is for foreign vehicles entering Malaysia from Singapore via the Causeway (above) and the Second Link.
Malaysia's Vehicle Entry Permit scheme will be enforced in phases. The first phase, starting on Oct 1, is for foreign vehicles entering Malaysia from Singapore via the Causeway (above) and the Second Link.BERITA HARIAN FILE PHOTO

Thousands of foreign motorists, including Singaporeans, run the risk of having their personal information exposed after a loophole was discovered in the Malaysian Road Transport Department's Vehicle Entry Permit (VEP) website.

Information like a driver's identity card number, address, contact numbers, passport details and chassis information could be seen on the website by simply making an alteration to its URL. The data could be viewed in seconds by a registered VEP holder.

Please or to continue reading the full article.

Get unlimited access to all stories at $0.99/month

  • Latest headlines and exclusive stories
  • In-depth analyses and award-winning multimedia content
  • Get access to all with our no-contract promotional package at only $0.99/month for the first 3 months*

*Terms and conditions apply.

A version of this article appeared in the print edition of The Straits Times on April 27, 2019, with the headline 'Malaysian VEP site loophole exposes motorists' data'. Print Edition | Subscribe