How Could This Occur with Session/Cookie?

Strange thing happened at checkout page

[ksponline]

Hi,

I recently renewed a domain name on GoDaddy. I'm the only one who uses my computer and I'm the only one who has access to the GoDaddy account and username.

However, when I got to the credit card part of the checkout page on GoDaddy, there was already a name in the credit card field, and it wasn't mine or anyone I've ever heard of.

I emailed GoDaddy customer service about this and the rep said it wasn't a problem on their end...that the only way the name would appear on the form is if someone had used my computer and visited that page before.

So, can anyone tell me how that strange name would have gotten in that field? Not only am I the only one using this computer, all my cookies and browser history had recently been cleared due to a problem I was experiencing with VirusScan.

Hope someone can clear that up.

Thanks,
Kathy

[danieljean]

That seems strange indeed, and I would be inclined to think that it has to be originating from their side, not yours. Given that type of security, I would consider registering somewhere else...

[ksponline]

After I got the response the first time (that it had to be something to do with a user on my computer), I wrote back and told the rep that it must be a security breach of some kind on GoDaddy's end. The response I got was this:

Hello Kathy,

The information that is pre-filled out on that form comes from cookies on your computer and nowhere else. Even if there had been a security breach on our end, that would not have resulted in that information showing on your computer. That information is pulled from your machine, not ours. You may wish to delete your browser's cookies before trying again.

Please let us know if we can help you in any other way.

Sincerely,
(name deleted)

GoDaddy.com
Customer Service Representative

____________________

Knowing that it didn't originate from my computer does concern me about the security there... though I've been a very happy customer up until now.

I do recall several years ago after I moved and inadvertently changed ISPs before changing all my email addresses that I was able to convince an Amazon.com rep to give me the password to my account based on my old email address. But, I had remembered the email address incorrectly and so was actually given access to someone else's account. Fortunately for that person I'm honest and notified both Amazon and the account holder so that the password of the breached account could be changed.

Sure am puzzled about what happened at GoDaddy...

Thanks,
Kathy