Durex India spilled customers’ private order data

A security researcher discovered that Durex India's website exposed customer PII — including full names, phone numbers, emails, shipping addresses, order details, and amounts paid — via an unauthenticated order confirmation page. TechCrunch verified the findings, the researcher notified CERT-In, and the parent company declined to comment; the exact number affected is unknown though evidence suggests hundreds, raising risks of identity theft and harassment.