Fashion retailer Express left customers’ personal data and order details exposed to the internet

Fashion retailer Express left customer order confirmation pages exposed due to sequential order number vulnerability, revealing names, addresses, contact info, and partial payment card data. Security researcher Rey Bango discovered the flaw and enlisted TechCrunch's help to facilitate patching.