Google gaff exposed user log-in data

The gaff occurred on Google's freely-accessible anti-phishing blacklist some three weeks ago.

The firm issued a statement to say the problem has been fixed, and that procedures had been put in place to strip login information from future submissions to the blacklist.

In the cock-up, some users submitting suspected phishing sites through the Google Toolbar found that the submissions also contained their login and password information.

Security firm Finjan said that it first notified Google of the problem on 3 January, and confirmed that the list has since been cleaned of any sensitive user information.

A Google spokesman told vnunet.com that all users who had information disclosed had been notified "weeks ago". µ