So this is why people don't shop online

Well, it could have been a lot worse. I had a bad feeling about an ecommerce site and made a purchase anyway. Today, I checked the order confirmation and found that the url for the order was in the format www.example.com/blahblahblah.asp?OrderId=12345

You guessed it. By changing the order ID number I was able to see pretty much every order they've ever taken. While it didn't have any credit card information, it did have the Name, Home address and mailing address for all the orders.

While you do have to have a account to access this information, you can sign up for an account without buying anything. Somehow I think the home addresses of peopel who like to buy electronics could be valuable information. Hey at least they didn't give out my credit card number and email address.

I'm going to hold off on naming names until they've had a chance to respond to my email of complaint.