‘Lollicupstore’ Exposed Customer Data Online via Unprotected Database

guest · Jun 28, 2020

‘Lollicupstore’ Exposed Customer Data Online via Unprotected Database
The largest bubble tea supplier in the U.S. has exposed millions of internal and client records online
June 27, 2020
https://www.technadu.com/lollicupstore-exposed-customer-data-online-via-unprotected-database/105947/

The ‘Lollicupstore,’ America’s largest “bubble tea” supplier, has exposed sensitive customer information by misconfiguring one of its databases and leaving it accessible online. Besides client data, the 112 million records in the database also include product information, sales records, and various internal information that shouldn’t have been published.

The researcher responsible for the discovery and disclosure is Jeremiah Fowler, who immediately notified the owner on April 28, 2020. Lollicupstore failed to answer and was contacted again on May 3, 2020, and then one final time on June 3, 2020.
Click to expand...

It is unknown if ‘Lollicupstore’ informed its clients of the security incident, but there’s more into it that should make the sending of a notice non-negotiable. The researcher says he located a “payment” file with over 835,000 records in it, and these details could be very revealing for the supplier’s clients.
All that said, if you have done business with Lollicupstore in the past, be very careful with how you handle incoming communications.
Click to expand...

Security Discovery: Largest US Bubble Tea Supplier Exposed Data Online

On April 28th I discovered a dataset that contained what appeared to be customer information, payment references and was labeled as production data. There were links to sales records and links that identified the owner of the database was Lollicupstore.

Please note, I am not indicating or implying that customers are at risk or that this will happen. I am only presenting a scenario or possibility of how data could be abused by criminals.
According to Wikipedia: Lollicup Coffee & Tea is a Taiwanese American chain of tea shops founded by Lollicup USA, Inc., with headquarters in Chino, California. The company was founded in 2000 and currently has 38 branches in the United States and China.
Click to expand...

Log in or Sign up

‘Lollicupstore’ Exposed Customer Data Online via Unprotected Database

guest Guest

Log in or Sign up

‘Lollicupstore’ Exposed Customer Data Online via Unprotected Database

guest Guest

Useful Searches