WHSmith data breach leads to hundreds of emails

Misconfigured contact-us form on retailer’s website sends data to company’s entire mailing list

Alex Hern

Newsagent WHSmith has compromised users’ private data sending it in hundreds of emails to customers due to a misconfigured “contact us” form on the retailer’s magazine website.

Information typed into the form, which is supposed to then be passed on to the company itself, was instead apparently sent to its entire mailing list.

In a vicious cycle, some subscribers used the affected form in an attempt to contact WHSmith to end the email bombardment – instead generating still-more messages to fill users’ inboxes.

To read the entire article, please click here.

Source: http://www.theguardian.com/