The British telco Three UK has once more allowed visitors to its homepage to examine the account information of its customers as if they were logged in, making personal and billing information accessible to casual browsers.
The login-restricted area of the website is where one can access their billing and personal information.
It was unclear whether the website going offline in the midst of the week was related to the privacy gaffe.
It was discovered that anyone had sporadic access to the data of three clients throughout the troubled time.
Source: https://www.theregister.com/2019/11/05/three_uk_data_breach_homepage_again/
"id": "THR83830423",
"linkid": "threeuk",
"type": "Data Leak",
"date": "11/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"