Do(ug)h! Half-baked security at Panera Bread spills customer data

The website for restaurant chain Panera Bread has made the personal information for customers’ online accounts available for takeout since August last year, according to security researcher Dylan Houlihan. The all-your-can-eat menu on its website offered online account holders’ full names, home addresses, email addresses, dietary preferences, usernames, phone numbers, birthdays and the trailing four digits of saved credit cards to anyone able to construct a simple web query.

Read full news article on The Register

 


Date:

Categorie(s):

Tag(s):