[Dataloss] Sears exposes customer information via its web site

[Richard Forno]

------ Forwarded Message

From: Rich 

Summary: if you know someone's name, address and phone number, you can
retrieve their purchase history from Sears' web site.

 http://www.benedelman.org/news/010408-1.html

This is an interesting follow-on to the recent discovery that Sears
is pushing spyware:

 http://community.ca.com/blogs/securityadvisor/archive/2007/12/20/sears-com-
join-the-community-get-spyware.aspx

 http://www.benedelman.org/news/010108-1.html