AT&T apologises for iPad security gaffe

AT&T has apologised after a security blunder that affected 114,000 iPad 3G owners

AT&T has apologised to customers after a security lapse exposed iPad buyers' email addresses and details.

Goatse Security revealed last week that it had been able to exploit a flaw in AT&T's protocols to harvest the data on some 114,000 iPad 3G owners.

The list of those affected included the White House chief of staff, New York mayor Michael Bloomberg and numerous senior people in the military, media and commerce sectors.

Dorothy Attwood, chief privacy officer at AT&T, has now apologised to those customers whose email addresses had been exposed, in a letter republished on Boy Genius Report.

Attwood described Goatse Security as "hackers", explaining that the firm had "maliciously exploited a function designed to make your iPad log-in process faster by pre-populating an AT&T authentication page with the email address you used to register your iPad for 3G service".

"I want to assure you that the email address and ICC-ID were the only information that was accessible. Your password, account information, the contents of your email, and any other personal information were never at risk," she said.

"AT&T acted quickly to protect your information, and we promise to keep working around the clock to keep your information safe. Thank you very much for your understanding, and for being an AT&T customer."