He noted that there have likely been many similar such instances that never came to light because the perpetrators were never caught.

Web security extends beyond quality assurance and properly designing Web applications to include how the services are set up to operate, he said.