02 Aug Kids Pass Discounts Site Reported to Have Exposed Customer Data
According to a report last Monday, customer Alex Haines discovered a security flaw that exposed user information from on family discounts site Kids Pass. He noticed a way to view personal information of previous customers that signed up on the website, exposing details like emails and phone numbers.
Being concerned, he contacted cyber security researcher Tory Hunt for advice. Hunt told Haines to stop browsing and inform the company of the exposure. Both of them message the Kids Pass Twitter account, but were surprised they were blocked from the platform.
Later on, a representative from Kids Pass said that the issue has been resolved. They explained Haines and Hunt were blocked by the company’s social media team, but were added back after 10 hours.
Kids Pass stated they put up a vulnerability policy on their site following the incident. To date, the Information Commissioner’s Office stated they will investigate the Kids Pass website.
Source: BBC News
