Uh oh, looks like Chinese e-commerce company Zhefengle really “zhe-fengled” this one!
Security researcher Viktor “I’m the” Markopoulos was just poking around the internet, minding his own business, when he stumbled upon a huge unprotected database belonging to Zhefengle.
We’re talking 3.3 million orders with names, addresses, phone numbers, and even government ID numbers—just there for the taking!
But don’t worry, valued Zhefengle customer! The company told us they’ve “addressed the issue promptly” and are investigating internally. Phew, now we can get back to buying questionable products at weirdly low prices!
Apparently, the IDs were required for identity verification when importing overseas goods. Which seems fine and not at all risky!
We’re sure uploading personal documents to random websites is completely safe and secure. What could go wrong?
The database was just hanging out unpassworded for anyone to access. But we’re confident Zhefengle is competent enough to secure people’s sensitive information properly in the future. The third time’s the charm!
In the meantime, happy shopping! Be sure to check out Zhefengle’s clearance section for unbeatable deals. And don’t forget to upload a copy of your ID—they definitely know how to keep that safe!
