iTnews
  • Home
  • News
  • Technology
  • Security

Broken door lock at Vocus NZ data centre goes viral

By Ry Crozier on Dec 4, 2018 6:47AM
Broken door lock at Vocus NZ data centre goes viral

Operator opens audit.

Vocus has launched an audit of the physical security of one of its New Zealand data centres after a viral video showed the foyer could be accessed by simply pushing two doors open.

The video, by Twitter user Liam Farr, showed Vocus’ 7A data centre in the Auckland suburb of Albany.

How to break into a datacenter... pic.twitter.com/Q84JyljT2V

— Liam Farr (@nz_liam) December 1, 2018

Farr found the outside gate - which has intercom and swipe card access - unlocked.

He then progressed to the facility door, again with intercom and swipe card access, but showed that lock was broken.

That led into a small foyer with a choice of a door with a fingerprint reader and magnetic lock leading into the technical floor space, or stairs to reception.

The video, which was posted on Saturday morning, had received 37,500 views by Monday night, and forced Vocus NZ to use its Twitter account for the first time in a year-and-a-half.

“We fixed the front door which leads to a visitor lobby, but rest assured the DC was NOT insecure,” the company said late Saturday.

“The facility has 2FA card and biometric security, secure mantrap areas, 24/7 surveillance and has NOT been accessed by any unauthorised persons.”

Farr - who is a Vocus customer but has gear in another part of the Albany site - said that the front lock on 7A had been busted “on and off” for the past six months, and he’d had trouble rousing someone to fix it, hence the social media post.

He raised concerns that physical security standards at the site were slipping, and that the site’s protections - such as the swipe cards and the magnetic lock installation - were vulnerable to bypass.

In a statement to iTnews, Vocus NZ said that the video showed a customer “walking through an old security gate that hasn’t been in operation for many years and is no longer part of the data centre security system.”

“The customer was then able to reach the foyer without using his access card due to a faulty lock on the front door of the facility. This was fixed Saturday evening,” the spokesperson said.

“While being able to access the foyer of the facility was a failure, it’s extremely important to note that the facility has 2FA card and biometric security, secure mantrap areas, 24/7 surveillance and at no time was the data centre accessible to unauthorised persons.

“The filming was undertaken in the lobby area, outside of the external mantrap door. There are two doors in the mantrap configuration with swipe, PIN and biometrics between that lobby and the data floor.

“The magnetic lock is on the outside of the mantrap, not to the data floor. There are staff onsite during the day in that area, and after hours there is remote monitoring and regular security patrols.”

Still, Vocus said it would be “conducting an audit into the failure of the front door and contractors who undertook the work”.

“The security of our premises is paramount to our business, and we are taking this very seriously,” the spokesperson said.

iTnews reached Farr but he did not want to comment beyond what was already in the public domain.

Vocus committed to discuss Farr’s physical security concerns directly and iTnews understands that contact has been initiated.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © iTnews.com.au . All rights reserved.
Tags:
accessaucklandbrokendata centrelockphysicalsecurityvocus

Partner Content

"We're seeing some good policy put in place, but that's the exception"
Partner Content "We're seeing some good policy put in place, but that's the exception"
Avoiding CAPEX by making on-premise IT more cloud-like
Promoted Content Avoiding CAPEX by making on-premise IT more cloud-like
Security "mindset shift" needed to protect organisations
Promoted Content Security "mindset shift" needed to protect organisations
Security: Understanding the fundamentals of governance, risk & compliance
Promoted Content Security: Understanding the fundamentals of governance, risk & compliance

Sponsored Whitepapers

Extracting the value of data using Unified Observability
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
Video: Watch Juniper talk about its Aston Martin partnership

Events

  • Micro Focus Information Management & Governance (IM&G) Forum 2022
  • CRN Channel Meets: CyberSecurity Live Event
  • IoT Insights: Secure By Design for manufacturing
  • Cyber Security for Government Summit
By Ry Crozier
Dec 4 2018
6:47AM
0 Comments

Related Articles

  • Critical vulnerabilities found in Powertek distribution units
  • Google open sources data centre scale encryption
  • RBA pushes first IaaS workload into Azure
  • Microsoft warns Azure customers of flaw that could have permitted hackers access to data
Share on Twitter Share on Facebook Share on LinkedIn Share on Whatsapp Email A Friend

Most Read Articles

Qantas calls time on IBM, Fujitsu in tech modernisation

Qantas calls time on IBM, Fujitsu in tech modernisation

Service NSW hits digital services goal two years early

Service NSW hits digital services goal two years early

SA Police ignores Adelaide council plea for facial recognition ban on CCTV

SA Police ignores Adelaide council plea for facial recognition ban on CCTV

NBN Co says TPG tie-up could help Telstra sidestep spectrum limits

NBN Co says TPG tie-up could help Telstra sidestep spectrum limits

Digital Nation

IBM global chief data officer on the rise of the number crunchers
IBM global chief data officer on the rise of the number crunchers
The security threat of quantum computing
The security threat of quantum computing
Crypto experts optimistic about future of Bitcoin: Block
Crypto experts optimistic about future of Bitcoin: Block
Integrity, ethics and board decisions in the digital age
Integrity, ethics and board decisions in the digital age
COVER STORY: Operationalising net zero through the power of IoT
COVER STORY: Operationalising net zero through the power of IoT
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.
Your use of this website constitutes acceptance of nextmedia's Privacy Policy and Terms & Conditions.