{"id":204,"date":"2007-04-26T11:57:39","date_gmt":"2007-04-26T10:57:39","guid":{"rendered":"http:\/\/resource.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/"},"modified":"2007-04-26T11:57:39","modified_gmt":"2007-04-26T10:57:39","slug":"candidates-details-were-freely-available-in-mtas-security-breach","status":"publish","type":"post","link":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/","title":{"rendered":"Candidates&#8217; details were freely available in MTAS security breach"},"content":{"rendered":"<p>Personal details of applicants involved in the already discredited MTAS system were available for all to see yesterday &#8212; until the Department of Health stepped in and closed the loophole which had allowed anyone to view the page without the need for a password.<!--more--><\/p>\n<p>Channel 4 News ran with the story yesterday, after discovering that the\u00a0URL of the page containing all this information was not password protected.<\/p>\n<p>Although this address should only have been known to those who were authorised to access the site &#8212; primarily those interviewing candidates &#8212; the\u00a0URL was leaked. This made it possible for anyone who had been given that address to go straight to the page, bypassing the initial home page.<\/p>\n<p>As soon as the Department of Health became aware of the\u00a0security breach, early yesterday evening, they put a password on the page. But in the meantime confidential information about junior doctors &#8212; including their religion and\u00a0sexual orientation &#8212; could have been viewed by anyone who knew the\u00a0URL.\u00a0<\/p>\n<p>Dr Jo Hilborne, chairman of the BMA Junior Doctors Committee, said it was a breach of security &#8220;on an appalling scale&#8221;.<\/p>\n<p>\u201cWhat little faith anyone had left in this shambolic system has just evaporated,&#8221; she said. &#8220;The ease with which anyone could have accessed highly sensitive information about thousands of people is frankly shocking.\u00a0 The BMA has raised concerns about the security of the MTAS website on more than one occasion.\u00a0 The Department of Health had months to put it right and failed.\u00a0 There can be no excuse for this.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Personal details of applicants involved in the already discredited MTAS system were available for all to see yesterday &#8212; until the Department of Health stepped in and closed the loophole [&#8230;]<\/p>\n<p><a class=\"btn btn-secondary understrap-read-more-link\" href=\"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/\">More&#8230;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-204","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Candidates&#8217; details were freely available in MTAS security breach - The BMJ<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Candidates&#8217; details were freely available in MTAS security breach - The BMJ\" \/>\n<meta property=\"og:description\" content=\"Personal details of applicants involved in the already discredited MTAS system were available for all to see yesterday &#8212; until the Department of Health stepped in and closed the loophole [...]More...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"The BMJ\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/bmjdotcom\/\" \/>\n<meta property=\"article:published_time\" content=\"2007-04-26T10:57:39+00:00\" \/>\n<meta name=\"author\" content=\"BMJ\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@bmj_latest\" \/>\n<meta name=\"twitter:site\" content=\"@bmj_latest\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"BMJ\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/\"},\"author\":{\"name\":\"BMJ\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#\\\/schema\\\/person\\\/ba3da426ed20e8f1d933ca367d8216fe\"},\"headline\":\"Candidates&#8217; details were freely available in MTAS security breach\",\"datePublished\":\"2007-04-26T10:57:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/\"},\"wordCount\":266,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#organization\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/\",\"url\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/\",\"name\":\"Candidates&#8217; details were freely available in MTAS security breach - The BMJ\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#website\"},\"datePublished\":\"2007-04-26T10:57:39+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/2007\\\/04\\\/26\\\/candidates-details-were-freely-available-in-mtas-security-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Candidates&#8217; details were freely available in MTAS security breach\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#website\",\"url\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/\",\"name\":\"The BMJ\",\"description\":\"Helping doctors make better decisions.\",\"publisher\":{\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#organization\",\"name\":\"The BMJ\",\"url\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/files\\\/2018\\\/05\\\/The-BMJ-logo.jpg\",\"contentUrl\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/files\\\/2018\\\/05\\\/The-BMJ-logo.jpg\",\"width\":852,\"height\":568,\"caption\":\"The BMJ\"},\"image\":{\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/bmjdotcom\\\/\",\"https:\\\/\\\/x.com\\\/bmj_latest\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/#\\\/schema\\\/person\\\/ba3da426ed20e8f1d933ca367d8216fe\",\"name\":\"BMJ\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b4d8f39281bcae118348a1c027347b8e53b82d42520e774a8b50dd9a6ac6c01d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b4d8f39281bcae118348a1c027347b8e53b82d42520e774a8b50dd9a6ac6c01d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b4d8f39281bcae118348a1c027347b8e53b82d42520e774a8b50dd9a6ac6c01d?s=96&d=mm&r=g\",\"caption\":\"BMJ\"},\"sameAs\":[\"https:\\\/\\\/blogs.bmj.com\\\/\"],\"url\":\"https:\\\/\\\/blogs.bmj.com\\\/bmj\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Candidates&#8217; details were freely available in MTAS security breach - The BMJ","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/","og_locale":"en_US","og_type":"article","og_title":"Candidates&#8217; details were freely available in MTAS security breach - The BMJ","og_description":"Personal details of applicants involved in the already discredited MTAS system were available for all to see yesterday &#8212; until the Department of Health stepped in and closed the loophole [...]More...","og_url":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/","og_site_name":"The BMJ","article_publisher":"https:\/\/www.facebook.com\/bmjdotcom\/","article_published_time":"2007-04-26T10:57:39+00:00","author":"BMJ","twitter_card":"summary_large_image","twitter_creator":"@bmj_latest","twitter_site":"@bmj_latest","twitter_misc":{"Written by":"BMJ","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/#article","isPartOf":{"@id":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/"},"author":{"name":"BMJ","@id":"https:\/\/blogs.bmj.com\/bmj\/#\/schema\/person\/ba3da426ed20e8f1d933ca367d8216fe"},"headline":"Candidates&#8217; details were freely available in MTAS security breach","datePublished":"2007-04-26T10:57:39+00:00","mainEntityOfPage":{"@id":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/"},"wordCount":266,"commentCount":2,"publisher":{"@id":"https:\/\/blogs.bmj.com\/bmj\/#organization"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/","url":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/","name":"Candidates&#8217; details were freely available in MTAS security breach - The BMJ","isPartOf":{"@id":"https:\/\/blogs.bmj.com\/bmj\/#website"},"datePublished":"2007-04-26T10:57:39+00:00","breadcrumb":{"@id":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blogs.bmj.com\/bmj\/2007\/04\/26\/candidates-details-were-freely-available-in-mtas-security-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blogs.bmj.com\/bmj\/"},{"@type":"ListItem","position":2,"name":"Candidates&#8217; details were freely available in MTAS security breach"}]},{"@type":"WebSite","@id":"https:\/\/blogs.bmj.com\/bmj\/#website","url":"https:\/\/blogs.bmj.com\/bmj\/","name":"The BMJ","description":"Helping doctors make better decisions.","publisher":{"@id":"https:\/\/blogs.bmj.com\/bmj\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogs.bmj.com\/bmj\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blogs.bmj.com\/bmj\/#organization","name":"The BMJ","url":"https:\/\/blogs.bmj.com\/bmj\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.bmj.com\/bmj\/#\/schema\/logo\/image\/","url":"https:\/\/blogs.bmj.com\/bmj\/files\/2018\/05\/The-BMJ-logo.jpg","contentUrl":"https:\/\/blogs.bmj.com\/bmj\/files\/2018\/05\/The-BMJ-logo.jpg","width":852,"height":568,"caption":"The BMJ"},"image":{"@id":"https:\/\/blogs.bmj.com\/bmj\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/bmjdotcom\/","https:\/\/x.com\/bmj_latest"]},{"@type":"Person","@id":"https:\/\/blogs.bmj.com\/bmj\/#\/schema\/person\/ba3da426ed20e8f1d933ca367d8216fe","name":"BMJ","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/b4d8f39281bcae118348a1c027347b8e53b82d42520e774a8b50dd9a6ac6c01d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b4d8f39281bcae118348a1c027347b8e53b82d42520e774a8b50dd9a6ac6c01d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b4d8f39281bcae118348a1c027347b8e53b82d42520e774a8b50dd9a6ac6c01d?s=96&d=mm&r=g","caption":"BMJ"},"sameAs":["https:\/\/blogs.bmj.com\/"],"url":"https:\/\/blogs.bmj.com\/bmj\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/posts\/204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/comments?post=204"}],"version-history":[{"count":0,"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/posts\/204\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/media?parent=204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/categories?post=204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.bmj.com\/bmj\/wp-json\/wp\/v2\/tags?post=204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}