Blippy users' credit card numbers found on Google

[Update: Blippy cofounder Philip Kaplan emailed a response. CNET News is reporting that the cards in question were issued by Fifth Third, not Citibank.]

[Update #2: As of Saturday morning in California, Google told Blippy they've removed all credit card numbers from Blippy in their index. We found one more number just before the purge completed.]

Yesterday was a big day for social-oversharing site Blippy, which lets members automatically post their purchases to the Internet. The company announced $11.2 million in funding and was profiled in The New York Times.

Overnight, at least one Internet power user figured out a way to search for Blippy members’ credit card numbers on Google. A fairly obvious search for “from card” this morning returned 127 results that included full credit card numbers.

VentureBeat reporters deduced that all are Citibank-issued MasterCard numbers, though CNET News reported that the cards in question were issued by Fifth Third, a Midwestern bank. We’re reluctant to publish further details yet. We’ve contacted Citibank, Blippy CEO Ashvin Kumar and cofounder Philip Kaplan, and some of the people whose card numbers turned up.

0 comments

Trackbacks

  1. [...] nowhere near is startling as finding your credit card details published on Google, this is perhaps a little too much information to be sharing with the world and something current [...]

  2. [...] nowhere near is startling as finding your credit card details published on Google, this is perhaps a little too much information to be sharing with the world and something current [...]

  3. [...] nowhere near is startling as finding your credit card details published on Google, this is perhaps a little too much information to be sharing with the world and something current [...]

  4. [...] nowhere near is startling as finding your credit card details published on Google, this is perhaps a little [...]

  5. [...] the purchases I make on my debit or credit card will always remain private especially after Blippy mistakenly published users credit card numbers a few months ago. Unless you’re prepared to share your vices with the world, be sure to select manual update when [...]

  6. [...] airline confirmation numbers in it, so they patched the problem… and until last Friday when Venturebeat found the card numbers, Blippy hadn't realised that Google had indexed the site during that half [...]

  7. [...] and we’re sure Womply is well aware of the lessons learnt by Blippy’s team including an inadvertent disclosure of user’s credit card information. Since then, Blippy has pivoted in to the Artisanal Deals [...]

  8. [...] with their friends, accidentally (we assume) posted the credit card numbers of some users online. Venturebeat determined that a search in Google (NSDQ: GOOG) for “site:blippy.com+’from [...]

  9. […] of days. Best because they raised $11.2 million in new funding. Worst because on the same day, VentureBeat revealed that the company exposed several users’ credit card numbers in Google search results. […]

  10. […] the purchases I make on my debit or credit card will always remain private especially after Blippy mistakenly published users credit card numbers a few months ago. Unless you’re prepared to share your vices with the world, be sure to select manual update when […]