Westpac outage affects 200,000 customers

Liam Tung, ZDNet Australia

04 September 2007 05:22 PM

Tags: westpac, banking, web site, online, outage

At the time of writing, the front page of Westpac's Web site is currently out of action, causing angst for customers around the country.

Readers contacted ZDNet Australia to report another outage that had been affecting the Westpac site since early this morning.

A spokesperson for Westpac told ZDNet Australia: "The problem is isolated to the Westpac homepage and is due to an internal systems error, which caused the page to be inaccessible. It only impacts customers who have not bookmarked the login page."

The spokesperson added: "Only 50 percent of our 400,000 customers who use the site daily were affected."

ZDNet Australia was able to confirm that at 3pm today Westpac's login page and its online banking system remain functioning.

However, according to a Crikey report earlier today, Westpac's entire online banking system had been down since 8am, including several ATMs in the south of Sydney.

"If you wait 20 minutes for customer service it will give you a secure port 43 alternative address for Westpac online which doesn't work either," Crikey reported today.

The spokesperson denied that the online banking system had been affected as Crikey and other media have reported today, and questioned if the computers used by those who reported the failure of Westpac's online banking system were functioning.

Westpac has been unable to place a notice on its Web site advising customers of the disruption to services. The spokesperson said: "Westpac apologises for the inconvenience and our staff are working hard to develop a replacement homepage."

Westpac has recently been promoting the launch of its 'new look' Web site and did alert customers last week that the site would be down for maintenance on Saturday and Sunday.

Australia's fourth largest bank has faced a series of IT and security challenges over the past 12 months. In June it experienced a system and countrywide blackout, affecting its 16,500 ATMs, EFTPOS system, online banking and several bank branches.

More recently, it has suffered a Denial of Service (DoS) attack as well as "hardware problems" that it believed scammers later attempted to exploit in a phishing campaign.

Westpac was able to pin the power outage on staff at IBM Global Services who mistakenly cut power within the bank's Ryde datacentre while providing maintenance work on a UPS (Uninterruptible Power System) device.

However a ZDNet Australia source who worked for Westpac's IT department during the June 2007 DoS attack said: "Our Information Security Group (ISG) were completely unprepared for this and didn't know the procedures that should be followed."

"We are waiting for a possible larger attack," he said, believing the hackers were probing for vulnerabilities in Westpac's IT and banking systems.

Advertisement

Talkback 8 comments

  1. Moronic Bankers they are indeed Peter Pan -- 05/09/07

    its amazing how such an incompetent company can still be functioning....

    if there budget for IT systems was more and they hired some decent talent, instead of outsourcing they wouldn't be looking so stupid now...

    if this is how they handle their data...imagine how they handle money...absolutely pathetic...

  2. hopeless Anonymous -- 05/09/07

    how much profit do these companies make and they still can't even budget enough for decent IT?

    1. decent IT-team ?!? Anonymous -- 05/09/07

      ...
      it took them 3 days to build a
      "Website unavailable" page....

  3. "Internal Systems Error" ? Anonymous -- 05/09/07

    Looks like one of the routers between me and Westpac's server is filtering/blocking the traffic..

    > ping www.westpac.com.au
    PING www.westpac.com.au (203.24.6.90): 56 data bytes
    36 bytes from gigabitethernet4-3.ken12.Sydney.telstra.net (139.130.2.65): Communication prohibited by filter
    Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
    4 5 00 5400 e1f7 0 0000 39 01 bb83 211.30.63.157 203.24.6.90

    Either, that router is either being mistakenly sent traffic for Westpac, or that router doesn't know that Westpac's IP is behind it.

    Calling this an "internal systems error", and saying that the bank's IT staff should be taking the blame for it, seems a bit misdirected.

  4. Windows NT 4.0 = Westpac High Tech :-) Anonymous -- 05/09/07

    I just checked the technical headers for the URL www.westpac.com.au and they show that the home page is currently hosted on Windows NT 4.0 !!!
    A pre-Windows 2000 server OS that is no lnger supported by Microsoft!
    Here they are for the doubting amongst you:
    ----------------------
    HTTP/1.1 200 OK
    Set-Cookie: ICMAU=f480aea9feedba78baee; path=/
    Server: Microsoft-IIS/4.0
    Cache-Control: no-cache
    Expires: Wed, 05 Sep 2007 06:31:12 GMT
    Content-Location: http://www.westpac.com.au/index.html
    Date: Wed, 05 Sep 2007 06:31:12 GMT
    Content-Type: text/html
    Accept-Ranges: bytes
    Last-Modified: Tue, 04 Sep 2007 14:13:44 GMT
    ETag: "09c30cdfdeec71:3444b"
    Content-Length: 3535
    ------------------------------
    Notice the "Server: Microsoft-IIS/4.0" This is 1998 technology. Someone shoud ask W/Pac why they are running such an ancient operating system!
    Unbelievable....
    This is not "inside" information. Its public knowledge. If you look at the IP traffic wih something like Microsofts "Netmon 3.1". A free 'sniffer' program. You will see the information above. i.e. IIS 4.0 Internet Information Services 4.0!! i.e. Westpac are using Windows NT 4.0. FACT. Not a guess! :-)

    1. Windows NT 4.0 Anonymous -- 17/09/07

      You really think they are running NT 4.0? They have firewalls in front of their webservers....they can alter the packets to what ever they want you to see. I really don't think they would announce such a big thing such as the operating system of a webserver...get a clue.

    2. Windows NT 4.0 Anonymous -- 23/09/07

      Of course they are running NT 4.0! You can see it yourself if you bothered to download the free sniffer I mentioned. A firewall will not fudge the IIS version as that breaks protocol rules. Someone else needs to get a clue! :-)

  5. Microsoft at what it does best - fail Anonymous -- 05/09/07

    You can trust microsoft to give you a "genuine dis-advantage"!

Add your opinion


Latest Videos

ZDNet's CIO Vision Series

Department of Defence | Greg Farr, CIO (part two)

In the second part of his interview, Defence CIO Greg Farr talks about outsourcing, the skills crisis and reveals his most urgent IT priority.

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Angus Kidman I'm a celebrity, don't back me up
    Celebrity comes with its perks — free alcohol, better-looking partners, lots of holiday time — and disadvantages — constant media intrusions, being forced to appear in films with Eddie Murphy for the long-term good of your career, and having to do mindless radio interviews with angry men who've been awake since 4am.
  • Array Lies, damned lies and telco stupidity
    Earlier this month, Telstra put out a press release trumpeting that it's come up with a new phone coaching service to help people who are "bamboozled" by their mobiles. Another excellent example of wrongheaded thinking from the mobile industry.
  • Array Dear carriers: More walking, less talking
    Sometimes, a well-placed and well-timed letter can make all the difference. Other times, it can make no difference at all — and even hurt your case. This week's missive by the Competitive Carriers' Coalition, I would suggest, falls into the latter category.
  • More blogs »

Tags

Back to top

Featured