Groupon hole exposes customer data
A Groupon customer has reported an apparent security hole to CNet in which the credit card information of another customer was exposed.
When Stephen Pipino logged into the Web site to make a purchase, he saw someone else's credit card information and address displayed in his account, along with his own credit card data. The information belonged to someone with his same first and last name. Pipino verified that the address matched a business address for the other Pipino and has contacted him to let him know about the problem.
"It appears to be an isolated incident," Groupon spokeswoman Julie Mossler told CNET. "We have no reason to believe that other accounts are compromised." The company is still looking into the matter, she said. "I could see all his address information, the last four digits of his credit card number, the expiration date and the bank and could have used his card to make my purchase," Pipino said. "I have logged out and back in multiple times and it's still there. This could be happening on a much greater scale."
