MSI and Zotac exposed customer warranty records (RMA) due to a server configuration issues

I wonder how they will handle this in the context of GDPR, if any European customers were affected. They have to inform affected people that their data was leaked.

While MSI provided a useful button to simply export everything to Excel, it would not be hard for a bad actor to crawl through the Zotac database. Using either previously leaked database of email addresses or actual names from social media to crawl the database, and download any hit that would be returned.

Like one of the Zotac partners eloquently said to Gamers Nexus:

If I can Google search my own credit memos... what the f*** is this? How can you be so insecure? How can you run a business like this?"

A credit memo is a contraction of the term "credit memorandum," which is a document issued by the seller of goods or services to the buyer, reducing the amount that the buyer owes to the seller under the terms of an earlier invoice. A credit memo may be issued because the buyer returned goods to the seller, or there is a pricing dispute, or a marketing allowance, or other reasons under which the buyer will not pay the seller the full amount of the invoice.

Note because I did not know what credit memo is, so more people may not know what it is

If you have no money, you won't have a phone they can call to scam you. Good thinking :thinking:

This news doesn't mean Asus, Apple or HP won't have the same issue tomorrow 😅 I would prioritize things like repairability or work culture. With security, the question is always when another company will fail to protect customer data, not if it will happen.

More like a shot-out to people who may be affected to be more careful, and rest to pay more attention to what unnecessary data we share all the time. People are uploading whole Amazon shopping carts as evidence that they bought one item from the provided list. Like it would be so hard to use paint and censor the screenshot.