4 ms·

This is EXACTLY the type of thing GDPR was designed to enforce. (Other than uninformed tracking) pretty much this exact scenario. I hope the company gets fined

by morrbo 7y ago

This is EXACTLY the type of thing GDPR was designed to enforce. (Other than uninformed tracking) pretty much this exact scenario. I hope the company gets fined to the fullest extent, as this absolutely shameful. The researchers attempting to contact 3 branches, with 2 turning them away/ignoring their emails is just the icing on the cake.

tyingq 7y ago
And plaintext passwords stored as well, on purpose, for auth...not accidentally in log files.
sorokod 7y ago
They got GDPR covered: https://www.supremainc.com/en/solutions/gdpr-privacy-protection.asp https://www.supremainc.com/en/solutions/gdpr-privacy-protect...