Westpac outage affects 200,000 customers

By Liam Tung, ZDNet Australia
04 September 2007 05:22 PM
Tags: westpac, banking, web site, online, outage

At the time of writing, the front page of Westpac's Web site is currently out of action, causing angst for customers around the country.

Readers contacted ZDNet Australia to report another outage that had been affecting the Westpac site since early this morning.

A spokesperson for Westpac told ZDNet Australia: "The problem is isolated to the Westpac homepage and is due to an internal systems error, which caused the page to be inaccessible. It only impacts customers who have not bookmarked the login page."

The spokesperson added: "Only 50 percent of our 400,000 customers who use the site daily were affected."

ZDNet Australia was able to confirm that at 3pm today Westpac's login page and its online banking system remain functioning.

However, according to a Crikey report earlier today, Westpac's entire online banking system had been down since 8am, including several ATMs in the south of Sydney.

"If you wait 20 minutes for customer service it will give you a secure port 43 alternative address for Westpac online which doesn't work either," Crikey reported today.

The spokesperson denied that the online banking system had been affected as Crikey and other media have reported today, and questioned if the computers used by those who reported the failure of Westpac's online banking system were functioning.

Westpac has been unable to place a notice on its Web site advising customers of the disruption to services. The spokesperson said: "Westpac apologises for the inconvenience and our staff are working hard to develop a replacement homepage."

Westpac has recently been promoting the launch of its 'new look' Web site and did alert customers last week that the site would be down for maintenance on Saturday and Sunday.

Australia's fourth largest bank has faced a series of IT and security challenges over the past 12 months. In June it experienced a system and countrywide blackout, affecting its 16,500 ATMs, EFTPOS system, online banking and several bank branches.

More recently, it has suffered a Denial of Service (DoS) attack as well as "hardware problems" that it believed scammers later attempted to exploit in a phishing campaign.

Westpac was able to pin the power outage on staff at IBM Global Services who mistakenly cut power within the bank's Ryde datacentre while providing maintenance work on a UPS (Uninterruptible Power System) device.

However a ZDNet Australia source who worked for Westpac's IT department during the June 2007 DoS attack said: "Our Information Security Group (ISG) were completely unprepared for this and didn't know the procedures that should be followed."

"We are waiting for a possible larger attack," he said, believing the hackers were probing for vulnerabilities in Westpac's IT and banking systems.

Talkback 8 comments

    Moronic Bankers they are indeed Peter Pan -- 05/09/07

    its amazing how such an incompetent company can still be functioning....

    if there budget for IT systems was more and they hired some decent talent, instead of outsourcing they wouldn't be looking so stupid now...

    if this is how they handle their data...imagine how they handle money...absolutely pathetic...

    hopeless Anonymous -- 05/09/07

    how much profit do these companies make and they still can't even budget enough for decent IT?

    decent IT-team ?!? Anonymous -- 05/09/07 (in reply to #320085600)

    ...
    it took them 3 days to build a
    "Website unavailable" page....

    "Internal Systems Error" ? Anonymous -- 05/09/07

    Looks like one of the routers between me and Westpac's server is filtering/blocking the traffic..

    > ping www.westpac.com.au
    PING www.westpac.com.au (203.24.6.90): 56 data bytes
    36 bytes from gigabitethernet4-3.ken12.Sydney.telstra.net (139.130.2.65): Communication prohibited by filter
    Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
    4 5 00 5400 e1f7 0 0000 39 01 bb83 211.30.63.157 203.24.6.90

    Either, that router is either being mistakenly sent traffic for Westpac, or that router doesn't know that Westpac's IP is behind it.

    Calling this an "internal systems error", and saying that the bank's IT staff should be taking the blame for it, seems a bit misdirected.

    Windows NT 4.0 = Westpac High Tech :-) Anonymous -- 05/09/07

    I just checked the technical headers for the URL www.westpac.com.au and they show that the home page is currently hosted on Windows NT 4.0 !!!
    A pre-Windows 2000 server OS that is no lnger supported by Microsoft!
    Here they are for the doubting amongst you:
    ----------------------
    HTTP/1.1 200 OK
    Set-Cookie: ICMAU=f480aea9feedba78baee; path=/
    Server: Microsoft-IIS/4.0
    Cache-Control: no-cache
    Expires: Wed, 05 Sep 2007 06:31:12 GMT
    Content-Location: http://www.westpac.com.au/index.html
    Date: Wed, 05 Sep 2007 06:31:12 GMT
    Content-Type: text/html
    Accept-Ranges: bytes
    Last-Modified: Tue, 04 Sep 2007 14:13:44 GMT
    ETag: "09c30cdfdeec71:3444b"
    Content-Length: 3535
    ------------------------------
    Notice the "Server: Microsoft-IIS/4.0" This is 1998 technology. Someone shoud ask W/Pac why they are running such an ancient operating system!
    Unbelievable....
    This is not "inside" information. Its public knowledge. If you look at the IP traffic wih something like Microsofts "Netmon 3.1". A free 'sniffer' program. You will see the information above. i.e. IIS 4.0 Internet Information Services 4.0!! i.e. Westpac are using Windows NT 4.0. FACT. Not a guess! :-)

    Windows NT 4.0 Anonymous -- 17/09/07 (in reply to #320085641)

    You really think they are running NT 4.0? They have firewalls in front of their webservers....they can alter the packets to what ever they want you to see. I really don't think they would announce such a big thing such as the operating system of a webserver...get a clue.

    Windows NT 4.0 Anonymous -- 23/09/07 (in reply to #320086312)

    Of course they are running NT 4.0! You can see it yourself if you bothered to download the free sniffer I mentioned. A firewall will not fudge the IIS version as that breaks protocol rules. Someone else needs to get a clue! :-)

    Microsoft at what it does best - fail Anonymous -- 05/09/07

    You can trust microsoft to give you a "genuine dis-advantage"!

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Brad Howarth The key Topik is always money
    One of the big problems of the internet is that is practically impossible to keep up-to-date on preferred topics. You can limit your sources, but this can mean missing a lot of valuable data.
  • Array Google open-sources JavaScript tools
    Google announced overnight the release and open-sourcing of a trio of tools designed to help JavaScript developers.
  • Array Do we need the legislative blackmail?
    Virtually everyone in the telecommunications industry has their say in the Senate Standing Committee's public hearing into the pending legislation to split up Telstra, in this week's Twisted Wire podcast.
  • More blogs »

Tags

Back to top

Featured