Vistaprint left a customer service database unprotected, exposing calls, chats and emails

guest · Nov 25, 2019

Vistaprint left a customer service database unprotected, exposing calls, chats and emails
November 25, 2019
https://techcrunch.com/2019/11/25/vistaprint-security-lapse/

A security researcher has found an exposed database on the internet belonging to online printing giant Vistaprint.

Security researcher Oliver Hough discovered the unencrypted database last week. There was no password on the database, allowing anyone to access the data inside. The database was first detected by exposed device and database search engine Shodan on November 5, but it may have been exposed for longer.
Hough tweeted at the company to warn of the security lapse, but has not heard back.

Vistaprint, owned by Netherlands-based parent Cimpress, quietly took the database offline after TechCrunch reached out, but spokesperson Robert Crosland did not comment by our deadline, nor did they provide answers to several questions,— [...] The company also did not say if it planned to alert U.S and European data protection regulators.
Click to expand...

The database contained five tables stored with data on more than 51,000 customer service interactions, such as calls to customer service or chats with an online support agent. The data also included personally identifiable information, including names and contact information, which could identify individual customers.
The data also contained information hidden from the customer.

But it’s not clear why the database was exposed and left online without a password.
Click to expand...

Log in or Sign up

Vistaprint left a customer service database unprotected, exposing calls, chats and emails

guest Guest

Log in or Sign up

Vistaprint left a customer service database unprotected, exposing calls, chats and emails

guest Guest

Useful Searches