Misconfigured contact-us form on retailers website sends data to companys entire mailing list
Newsagent WHSmith has compromised users private data sending it in hundreds of emails to customers due to a misconfigured contact us form on the retailers magazine website.
Information typed into the form, which is supposed to then be passed on to the company itself, was instead apparently sent to its entire mailing list.
In a vicious cycle, some subscribers used the affected form in an attempt to contact WHSmith to end the email bombardment instead generating still-more messages to fill users inboxes.
To read the entire article, please click here.
Source: http://www.theguardian.com/
