Shopify · Report #345152
Publicly Accessible Datadog link
Validstatus
18upvotes
15 Jun 2018disclosed
Summary
Blog post: https://sites.google.com/securifyinc.com/rojanrijal/finding-leaked-sensitive-data
How it was found
During my daily scanning of shopify and shopify's internal domain (Shopify.io), I landed on a personal bookmark of an employee: █████████ who works at Guru at Shopify.
The link for personal bookmark is here: ███
There is a personal bookmark called ██████████. When going to the link: ████████ it loaded some stats about chat and talks:
{F292195}
Impact
Leak of statistics regarding how many calls are waiting in support, how many are handled, average wait time etc.