Beauty site lets anyone read customers' personal information • The Register

http://www.theregister.co.uk/2016/08/22/strawberry_net_security_fail/