Fashion retailer Express left customers’ personal data and order details exposed to the internet

TechCrunch reports that Express had a flaw in its online store where sequential order-number URLs allowed anyone to view other customers' order confirmation pages, exposing names, contact details, postal and billing addresses, order contents, and partial payment card information; the issue was discovered by a researcher, TechCrunch alerted Express, and the company patched the vulnerability but has not stated whether affected customers will be notified or whether access logs can determine if data was accessed.