Malaysian VEP site loophole exposes motorists' data

Malaysia's Vehicle Entry Permit scheme will be enforced in phases. The first phase, starting on Oct 1, is for foreign vehicles entering Malaysia from Singapore via the Causeway (above) and the Second Link.
Malaysia's Vehicle Entry Permit scheme will be enforced in phases. The first phase, starting on Oct 1, is for foreign vehicles entering Malaysia from Singapore via the Causeway (above) and the Second Link.BERITA HARIAN FILE PHOTO

Malaysia blocks access following discovery by S'porean that data like passport info could be viewed

Thousands of foreign motorists, including Singaporeans, run the risk of having their personal information exposed after a loophole was discovered in the Malaysian Road Transport Department's Vehicle Entry Permit (VEP) website.

Information like a driver's identity card number, address, contact numbers, passport details and chassis information could be seen on the website by simply making an alteration to its URL. The data could be viewed in seconds by a registered VEP holder.

Please or to continue reading the full article. Learn more about ST PREMIUM.

Enjoy unlimited access to ST's best work

  • Exclusive stories and features on multiple devices
  • In-depth analyses and opinion pieces
  • ePaper and award-winning multimedia content
A version of this article appeared in the print edition of The Straits Times on April 27, 2019, with the headline 'Malaysian VEP site loophole exposes motorists' data'. Print Edition | Subscribe