Zotac appears to have made an amateurish mistake and exposed confidential customer information contained in RMA documents. The information comes from the well-known channel GamerNexus, which posted an entire video explaining the situation.
Apparently, the manufacturer uploaded its customers’ RMA documents to Google’s open servers, making them publicly accessible to anyone who performed a simple search using terms like “Zotac RMA,” for example.
The images above were captured by GamerNexus without showing customer details, of course. The risk of this type of leak is that it facilitates identity theft by fraudsters who are always searching the internet for personal information about potential victims.
WCCFTech reports that these documents can no longer be found via Google now that Zotac has been notified of the issue.
The issue was reportedly first discovered by a Zotac customer who also follows GamerNexus. The person says he has a habit of searching for his own name on Google, and was surprised to find his RMA documents with the manufacturer in the results. He then realized that other people’s information was also available and decided to report the issue to the famous hardware channel.
Zotac’s response
Eventually, the video concludes with Zotac’s response to the situation. Steve Burke, the host, praises the manufacturer’s speed in resolving the issue, but criticizes the time it took to act. According to him, the brand first fixed the issue only for the customer who found it first, without bothering to do an assessment to see if it affected more people.
While the video was being produced for GamerNexus, its staff contacted the manufacturer and its partners, and it was through pressure from resellers that the security flaw was promptly fixed. Zotac will no longer accept file uploads directly through the site while it creates a new secure button, and will ask its users for documents via a new dedicated email address.
This has definitely not been a good week for Zotac. The company has this “blunder” revealed just days after getting scolded by the FTC, along with other companies, about the warranty of its products. Read more here.
Via: WCCFTech
Join the Adrenaline Offers Group
Check out the best deals on hardware, components and other electronics that we found online. Video cards, motherboards, RAM and everything you need to build your PC. By joining our group, you receive daily promotions and have early access to discount coupons.
Join the group and enjoy the promotions
Source: https://www.adrenaline.com.br/seguranca/zotac-expos-dados-de-clientes-pela-internet-em-documentos-de-rma/