My first suggestion is have a process to report data breach vulnerabilities. There is no process for Proseries. The representatives at Intuit said this is the only way I can report a possible data security issue.
Here is my suggestion: Do not allow password protected data to be sorted (highest to lowest) in homebase view.
Our firm uses Proseries to prepare tax returns for thousands of clients. Proseries offers the ability to password protect returns. When you password protect a tax return, the information such as total income, tax paid, zipcode, business income, investment income etc are all asterixed out with ******. HOWEVER, in the homebase view, you can still sort total income from highest to lowest. The numbers are asterixed out, but they are INCLUDED in the sort function. If you look at the number above and below, you know exactly how much income each password protected person reported on their tax returns. There are DOZENS OF DATA FIELDS that can be sorted. Even though they are asterixed out, you can easily gather A LOT of information from password protected returns.
Our employees are able to sort and know how much each partner makes, how much each co-worker makes and how much the firm as a whole makes each year.
I reported this a year ago and nothing has happened. I am OK with you NOT including this is the public forum for voting if the issue can get taken care of. I think its better the community as a whole doesn't know about this data security issue before its fixed.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.