A major e-commerce company, VTEX, has been leaking the personally identifiable information and sensitive data of over six million people for more than half a year, according to an investigation from Cybernews. This is particularly concerning with a major shopping event going on as there will likely be even more scams, phishing attacks and fraud attempts.

Cybernews first reported the leak over six months ago, but the company had no response when the publication attempted to contact them. Nor did they secure the database, which allowed the information to remain exposed online.

In February of this year, Cybernews researchers found that VTEX had unknowingly uploaded a very large amount of their users data to the open internet. This occurred because of an unauthenticated container – basically

See Full Page