Carding Forum
Professional
- Messages
- 2,788
- Reaction score
- 1,198
- Points
- 113
ZOTAC, a Chinese manufacturer of hardware components based on NVIDIA processors and mini-computers, for an indefinite time disclosed documents with confidential information of buyers.
In particular, due to the manufacturer's fault, requests for the return of goods were publicly available. In fact, this information could simply be Googled.
As a rule, this is caused by errors in access control, incorrectly granted permissions, and an incorrectly configured file. robots.txt, which should prevent web crawlers from indexing sensitive information.
As a result, you could find private data from the site in the Google search results zotacusa.com, namely: invoices, addresses, request details, and contact information.
Interestingly, the problem was pointed out by one of the viewers of the YouTube channel GamersNexus, whose owners in the social network X published a corresponding post (without mentioning the name of the vendor).
Later, GamersNexus confirmed that we are talking about Zotac USA. At the moment, it is unclear how many users were affected by the unintentional leak.
In particular, due to the manufacturer's fault, requests for the return of goods were publicly available. In fact, this information could simply be Googled.
As a rule, this is caused by errors in access control, incorrectly granted permissions, and an incorrectly configured file. robots.txt, which should prevent web crawlers from indexing sensitive information.
As a result, you could find private data from the site in the Google search results zotacusa.com, namely: invoices, addresses, request details, and contact information.
Interestingly, the problem was pointed out by one of the viewers of the YouTube channel GamersNexus, whose owners in the social network X published a corresponding post (without mentioning the name of the vendor).
Later, GamersNexus confirmed that we are talking about Zotac USA. At the moment, it is unclear how many users were affected by the unintentional leak.
