Michael Lynch • 7/2/2025

goHardDrive Leaked Personal Data for Thousands of Customers

A security researcher found that goHardDrive's online return merchandise authorization (RMA) status check form was publicly accessible and exposed full customer details, including names, addresses, and order information. The vulnerability allowed anyone to access data by simply changing the RMA number in the URL, potentially affecting 10k to 100k customers. The article details the discovery, the scale of the data leak, and the company's initial response and attempted fix.

0 comments

#web scraping #privacy #API Security