[Sophos]Online clothing store Witchery lets customers view - and edit! - each other's personal information

[igor51]

Online clothing store Witchery lets customers view - and edit! - each other's personal information

According to a News Limited report, customers visiting clothing retailer Witchery's mobile website were able to get at the PII of other users via a feature called "track my order."

Customers could also view every order currently being processed, not just their own...
Source: Online clothing store Witchery lets customers view - and edit! - each other's personal information