sb-nz logo
Story image

Online retailer Mighty Ape fixes wishlist privacy flaw

07 Feb 2019

New Zealand online retailer Mighty Ape has been quick to 'fix' issues that publicly shared some customers’ birthdates and product wishlists.

Mighty Ape has more than 250,000 customers and sells a range of technology, clothing, games, books and puzzles, music and other items.

One of its account settings allows customers to add products to their ‘wishlists’ for future review or purchase. Users can choose to keep these wishlists private or public – although it seems many were unaware those options existed.

Last week users on various forums including Reddit and GamePlanet alerted others to the fact that Mighty Ape wishlist privacy settings were, in some cases, public and available for anyone to see.

Public information included names, emails, birthdates and all products available on a user’s wishlist. 

While the issue only affected those whose wishlists were public (either by choice or by default), Mighty Ape quickly moved to rectify the issue.

Yesterday (February 6), Mighty Ape sent an email titled We're improving our Wish List privacy settings to users stating that the company had fixed the issue. The email says:

“Protecting the interests of our customers is extremely important to us. From today onwards, all new Wish Lists will be created as private by default. Customers will still be free to share links to their Wish List with loved ones, but their list will not show up in our 'Find a Friend's Wish List' search.

“We have also removed the year from the birth date field in our search results. Additionally, you must now opt-in to showing your birth date from the 'Edit List' menu on each of your Wish Lists. The purpose of the birth date is to make it easier for people to identify a Wish List as yours, but we understand this information can be sensitive.

“To give everyone the opportunity to decide if they would like their Wish List to be searchable; all existing Wish Lists have been set to private.

“If you would like your Wish List to remain private, you don't need to do a thing. If you would like your friends and family to be able to search for your Wish List, you will need to navigate to your Wish List, scroll to the bottom of the page and click 'Make my Wish List public'. Your Wish List will then be viewable from the 'Find a Friend's Wish List' page if someone searches for your full name or your email address. Each Wish List has its own independent privacy settings so you will need to update each list individually.”

Story image
Top security threats for 2021
2021 will see several themes develop into full blown security threats, many of them borne from the struggles of pandemic-stricken 2020, writes Wontok head of technology Mick Esber.More
Story image
Users pay with personal data - Kaspersky on WhatsApp move to share data with Facebook
"Nothing is truly free, and, unfortunately, the current business model for free services means that, essentially, we pay with our data."More
Story image
Dark net vendors wanting Bitcoin payments for unverified COVID-19 vaccines
As the medicines are being offered on the dark net, purchasers have no way of knowing whether they are genuine, according to Check Point.More
Story image
As digital transformation grows in A/NZ companies, misconceptions about their role in cloud security abound
While an 81% majority of A/NZ organisations are accelerating their digital transformation, a giant 99% of surveyed respondents say they believe their cloud security provider provides enough protection, according to a Trend Micro study. More
Story image
Entrust acquires HyTrust, with aim to improve data encryption solutions
Entrust says the acquisition will bolster its effort to deliver data protection and compliance solutions to its customers, while accelerating their digital transformations.More
Story image
Online gaming a 'hotbed' for DDoS attacks — report
The latency and availability issues present in online gaming, in particular, presented an attractive target to attackers, in addition to the enduring popularity of gaming in the era of COVID-19.More