Fiverr Allegedly Leaks User Information to Google Indexing, Researchers Say

Fiverr inadvertently exposed sensitive customer files (including completed tax forms) after misconfiguring its Cloudinary file-hosting integration to generate public, indexable URLs; Google indexed these files and a researcher, after an unacknowledged 40-day responsible disclosure, published the findings on Hacker News. The report warns of identity theft and regulatory implications and recommends immediate steps: halt sensitive file transfers, implement signed/time-limited URLs, request search de-indexing, and monitor for fraud.