2008 — Sears: Sears' ManageMyHome
Data compromised
Personal information
Technical writeup
Sears' ManageMyHome.com site exposed
customer purchase data to any online visitor who asked about it.
Root cause
Unintended disclosure
Personal information
Unintended disclosure