Express Exposed Thousands of Customer Orders Through Sequential Number Vulnerability

Fashion retailer Express inadvertently exposed thousands of customer orders due to a security misconfiguration, revealing names, addresses, contact information, and partial payment card details. The vulnerability exploited sequential order numbering, allowing automated tools to easily retrieve sensitive customer data through simple URL manipulation. This incident exemplifies the ongoing risks of basic security oversights and the critical need for proper vulnerability disclosure and breach notification procedures.