Online Greeting Card Company Exposes Details of 3.6 Million Customers

[engine]

According to the reporter of the exposure, he gave the company notice of the issue many months ago.

This begs many questions about this problem, and data security in general: What went wrong with the notification and the apparent lack of action?

Is there a general malaise over data security? Are enough businesses testing their data security?

Developer Paul Price revealed a massive security vulnerability in Moonpig's API this week, but before blowing the whistle Price claims to have contacted Moonpig about the problem way back in August 2013 -- and yet the company did nothing for 17 months. The vulnerability is likely to have been open to attack for even longer.Online Greeting Card Company Exposes Details of 3.6 Million Customers [cnet.com]

[toidi]

No repercussions, no concern. Why would they be concerned when they see the banks and everyone else not worrying about security?