Be Excellent To Each Other

http://www.ifc0nfig.com/moonpig-vulnerability/

Have you got a moonpig account? Did you know that for the past year they have known about a serious problem with their API and have done nothing about it?

If you don't want to read the page, i'll give you a TL:DR. You can get full details of any customer with no authentication. Name, address, Credit card details, etc... Don't worry though, they only give out the last 4 digits of your credit card, so that's nice.

Yes, I've already requested they delete my account and all my personal information.

!! Not cool! *goes off to delete account*

My account has been deleted, despite the crawling message telling me that all is fine.

Their response was terrible, "Your data is safe!!!!!!" despite long and detailed post explaining for the last year that it wasn't.

Well they blocked the API in question, so technically your data is safe, though it's spent the last 18 months not being safe.

Still, good stable door locking, folks