Westpac outage affects 200,000 customers

Liam Tung, ZDNet Australia
04 September 2007 05:22 PM
Tags: westpac, banking, web site, online, outage

At the time of writing, the front page of Westpac's Web site is currently out of action, causing angst for customers around the country.

Readers contacted ZDNet Australia to report another outage that had been affecting the Westpac site since early this morning.

A spokesperson for Westpac told ZDNet Australia: "The problem is isolated to the Westpac homepage and is due to an internal systems error, which caused the page to be inaccessible. It only impacts customers who have not bookmarked the login page."

The spokesperson added: "Only 50 percent of our 400,000 customers who use the site daily were affected."

ZDNet Australia was able to confirm that at 3pm today Westpac's login page and its online banking system remain functioning.

However, according to a Crikey report earlier today, Westpac's entire online banking system had been down since 8am, including several ATMs in the south of Sydney.

"If you wait 20 minutes for customer service it will give you a secure port 43 alternative address for Westpac online which doesn't work either," Crikey reported today.

The spokesperson denied that the online banking system had been affected as Crikey and other media have reported today, and questioned if the computers used by those who reported the failure of Westpac's online banking system were functioning.

Westpac has been unable to place a notice on its Web site advising customers of the disruption to services. The spokesperson said: "Westpac apologises for the inconvenience and our staff are working hard to develop a replacement homepage."

Westpac has recently been promoting the launch of its 'new look' Web site and did alert customers last week that the site would be down for maintenance on Saturday and Sunday.

Australia's fourth largest bank has faced a series of IT and security challenges over the past 12 months. In June it experienced a system and countrywide blackout, affecting its 16,500 ATMs, EFTPOS system, online banking and several bank branches.

More recently, it has suffered a Denial of Service (DoS) attack as well as "hardware problems" that it believed scammers later attempted to exploit in a phishing campaign.

Westpac was able to pin the power outage on staff at IBM Global Services who mistakenly cut power within the bank's Ryde datacentre while providing maintenance work on a UPS (Uninterruptible Power System) device.

However a ZDNet Australia source who worked for Westpac's IT department during the June 2007 DoS attack said: "Our Information Security Group (ISG) were completely unprepared for this and didn't know the procedures that should be followed."

"We are waiting for a possible larger attack," he said, believing the hackers were probing for vulnerabilities in Westpac's IT and banking systems.

Advertisement

Talkback 8 comments

    Moronic Bankers they are indeedPeter Pan -- 05/09/07

    its amazing how such an incompetent company can still be functioning....

    if there budget for IT systems was more and they hired some decent talent, instead of outsourcing they wouldn't be looking so stupid now...

    if this is how they handle their data...imagine how they handle money...absolutely pathetic...

    hopelessAnonymous -- 05/09/07

    how much profit do these companies make and they still can't even budget enough for decent IT?

    decent IT-team ?!?Anonymous -- 05/09/07 (in reply to #320085600)

    ...
    it took them 3 days to build a
    "Website unavailable" page....

    "Internal Systems Error" ?Anonymous -- 05/09/07

    Looks like one of the routers between me and Westpac's server is filtering/blocking the traffic..

    > ping www.westpac.com.au
    PING www.westpac.com.au (203.24.6.90): 56 data bytes
    36 bytes from gigabitethernet4-3.ken12.Sydney.telstra.net (139.130.2.65): Communication prohibited by filter
    Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
    4 5 00 5400 e1f7 0 0000 39 01 bb83 211.30.63.157 203.24.6.90

    Either, that router is either being mistakenly sent traffic for Westpac, or that router doesn't know that Westpac's IP is behind it.

    Calling this an "internal systems error", and saying that the bank's IT staff should be taking the blame for it, seems a bit misdirected.

    Windows NT 4.0 = Westpac High Tech :-)Anonymous -- 05/09/07

    I just checked the technical headers for the URL www.westpac.com.au and they show that the home page is currently hosted on Windows NT 4.0 !!!
    A pre-Windows 2000 server OS that is no lnger supported by Microsoft!
    Here they are for the doubting amongst you:
    ----------------------
    HTTP/1.1 200 OK
    Set-Cookie: ICMAU=f480aea9feedba78baee; path=/
    Server: Microsoft-IIS/4.0
    Cache-Control: no-cache
    Expires: Wed, 05 Sep 2007 06:31:12 GMT
    Content-Location: http://www.westpac.com.au/index.html
    Date: Wed, 05 Sep 2007 06:31:12 GMT
    Content-Type: text/html
    Accept-Ranges: bytes
    Last-Modified: Tue, 04 Sep 2007 14:13:44 GMT
    ETag: "09c30cdfdeec71:3444b"
    Content-Length: 3535
    ------------------------------
    Notice the "Server: Microsoft-IIS/4.0" This is 1998 technology. Someone shoud ask W/Pac why they are running such an ancient operating system!
    Unbelievable....
    This is not "inside" information. Its public knowledge. If you look at the IP traffic wih something like Microsofts "Netmon 3.1". A free 'sniffer' program. You will see the information above. i.e. IIS 4.0 Internet Information Services 4.0!! i.e. Westpac are using Windows NT 4.0. FACT. Not a guess! :-)

    Windows NT 4.0Anonymous -- 17/09/07 (in reply to #320085641)

    You really think they are running NT 4.0? They have firewalls in front of their webservers....they can alter the packets to what ever they want you to see. I really don't think they would announce such a big thing such as the operating system of a webserver...get a clue.

    Windows NT 4.0Anonymous -- 23/09/07 (in reply to #320086312)

    Of course they are running NT 4.0! You can see it yourself if you bothered to download the free sniffer I mentioned. A firewall will not fudge the IIS version as that breaks protocol rules. Someone else needs to get a clue! :-)

    Microsoft at what it does best - failAnonymous -- 05/09/07

    You can trust microsoft to give you a "genuine dis-advantage"!

Add your opinion


Latest Videos

Blogs

  • Chris Duckett PayPal launches Aussie developer program
    PayPal announced the opening of its certification program for Australian developers today, making Australia the first country outside of the US to offer certification.
  • Array Cash cow in a BigTinCan?
    Around one third of Australia's telcos have shut their doors over time, but that isn't stopping new ventures hoping to chip away at carriers' mobile call bonanza. By fighting carriers at the smartphone rather than the home phone, could the latest two contenders be onto something big?
  • Array A third of the way to a zettabyte
    This week on Twisted Wire we look at how internet usage is changing in Australia and around the world. How are we meeting this demand and how is the cost structure changing for the service provider?
  • More blogs »

Tags

Back to top

Featured