Personal details on view at Icasa
The Citizen quotes complainant Paul Scott as saying that when he went to the Icasa website and filled in the prescribed form he did not get a response from the organisation but he says that once the supporting documentation is submitted, a link is sent to the complainant via email.
He says that the link is not encrypted and by changing the last number generated by the site it is possible to view supporting documentation uploaded by any other of the complainants.
Scott says the complaint form contains sensitive information including identity numbers and bank account details. Icasa has apparently been informed about the problem.