If you’ve ordered from Durex India recently, your personal information might be out there for anyone to see. A major data leak on the company’s website has exposed customer details like full names, phone numbers, email addresses, shipping addresses, what was ordered, and how much was paid. And yes, we’re talking about intimate products here.
The issue was discovered by Sourajeet Majumder, a security researcher who noticed that Durex India’s order confirmation page lacked proper security measures. This meant that anyone with the link could view customer order details. Hundreds of people’s data might be exposed, but the exact number is still unclear.
Majumder reached out to TechCrunch to alert them about the breach, stressing how crucial privacy is for a brand like Durex. “For a brand dealing with intimate products, ensuring privacy is crucial,” he told them. TechCrunch did some digging of their own and confirmed that the information is indeed still available online. Because of this, TechCrunch is holding back certain details to avoid further harm.
What’s concerning is that Durex India’s parent company, Reckitt, seems to be playing it cool. When TechCrunch contacted them for a comment, Ravi Bhatnagar, a Reckitt spokesperson, refused to say anything about the exposed information or if they’re taking steps to fix it.
The implications here aren’t just about privacy. According to Majumder, this kind of exposure could lead to identity theft or unwanted harassment. He even reached out to India’s Computer Emergency Response Team (CERT-In) to report the issue, and they’ve acknowledged his alert. But as of now, there’s no word on any action being taken to secure the leaked data or protect affected customers.
So, if you’ve placed an order with Durex India recently, you might want to be on high alert. It’s another reminder of why companies handling sensitive data need to be on top of their game when it comes to cybersecurity. Until Durex India gets its act together, customers remain vulnerable, with personal details available for the world to see.