Retailer GameStop has reportedly leaked customer information, including billing addresses and payment history.
According to multiple users on social media, for a period of time on Saturday customers were being shown other users’ information when refreshing their order pages.
It’s not clear if this includes full credit card numbers, but one user shared an image showing a partial number.
“Every time I refresh the website, I can see someone else’s name, phone number, address, order history… it’s like a cycle of 4 or 5 people,” wrote one Reddit user. “This is very worrisome, can’t even change password because of this glitch.”
“Oh God, I tried it and it’s doing it for me too,” added another user. “Addresses, birthdays, emails, etc… this is really bad”.
Notice: To display this embed please allow the use of Functional Cookies in Cookie Preferences.
They added: “You can view the digital currency codes as it sends the verification code to your own email. My friend was able to view a full credit card number by clicking on a card, but the site reloaded quickly after that.”
One Twitter user claimed they were able to cycle through multiple account profiles by refreshing their page on Saturday.
“GameStop website was tripping out and kept hopping me between a couple dozen different profiles. The name at the top of the screen kept changing, the items in the cart, and the Pro Rewards points. Thought I was being hella hacked but the GS app seems to be stable”.
VGC has requested comment from GameStop and will update this article when we receive a response.
Read more on videogameschronicle.com