Nvidia web page found leaking customer email addresses to Randos



[ad_1]

The exposed email address that PCMag found on the Nvidia website (Credit: Nvidia)

It appears that the Nvidia website accidentally leaked some customer email addresses to anyone visiting the order status page.

On Friday, a Reddit user mentioned the problem with a screenshot, which shows the email address of a random person in the login field of the Nvidia website.

PCMag managed to replicate the issue on Nvidia’s order status page when using Firefox. In fact, a stranger’s email address appeared in the login field. A quick Google search revealed that the same email address belonged to a college student in Florida studying computer science.

The incident also affected software engineer Phil Bayfield, who says that a random person ended up learning his email address through the leak on Nvidia’s website.

As evidence, Bayfield posted an email exchange between himself and the random person, which was the first reported by TechTeamGB. The stranger sent the email on Monday in the hope that Bayfield had acquired Nvidia’s newly released RTX 3080 card with the goal of buying it for him.

“Can I have your 3080?” asked the stranger.

“I don’t have a 3080,” Bayfield replied.

The stranger then proceeded to explain how Bayfield’s email was exposed. “… somehow the Nvidia website is leaking emails. Your email was auto-filled in the email address field when I clicked on my order status from my email. Strange, ”said the person.

Bayfield told PCMag, “Well, I thought someone was playing a joke on me to be honest,” before realizing the leak was real. You signed up to the Nvidia website about a week ago to try and get the RTX 3080. But in doing so, you ended up exposing some of your personal information.

“What an absolute joke the release of the 30 series has been, though,” he added, alluding to how the 3080 card has been nearly impossible to obtain due to bots and resellers. “I wasn’t very impressed that my email was leaked (though it’s not exactly a secret).”

Nvidia told PCMag: “We are investigating the problem and will provide more information once it is available.” Meanwhile, the company has taken down the order status web page for maintenance.

It is unclear how many users were affected by the leak and exactly what information was disclosed. However, at least two users say they even found partially exposed credit card information on Nvidia’s order status page when the site was still live.

Other readings



[ad_2]