【Watch Watery Boarding House Online】

Here's your daily reminder there's no such thing as true security.

Panera Bread,Watch Watery Boarding House Online the beloved St. Louis-based bakery chain, is the latest company to show how much it doesn't care about protecting customer data.

SEE ALSO: Hackers steal credit card data from 5 million Saks and Lord & Taylor customers

The food chain's website reportedly left its customers' personal data completely exposed for anyone to scoop up.

Data including "names, email and physical addresses, birthdays and the last four digits of the customer’s credit card number" were leaked online according to cybersecurity expert Brian Krebs, who helped publicize the news.

Security professional Dylan Houlihan first discovered Panera Bread's website was leaking customer data (including his own) in easily readable plain text in August 2017.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

After a series of emails and false accusations claiming he was a scammer or was interested in a bounty, Mike Gustavison, Panera Bread’s Information Security Director, finally responded and said they were working on a resolution.

Eight months roll by — all the while, Houlihan's checking every month to see if the security hole has been fixed — and nothing happens. Houlihan decides enough is enough and forces Panera Bread's hand by getting Krebs to publicize the flaw in hopes of forcing the company to expedite a fix.

It's believed millions of users' data could have been exposed. Panera Bread, however, has downplayed the severity of the data leak, telling Fox News "only 10,000 customer records were exposed."

Panera Bread then said the company had fixed the security flaw, but Krebs discovered it wasn't in fact patched:

Almost in an instant, multiple sources — especially @holdsecurity — pointed out that Panera had basically “fixed” the problem by requiring people to log in to a valid user account at panerabread.com in order to view the exposed customer records (as opposed to letting just anyone with the right link access the records).

@onsecurity now believes up to 37 million customer records may have been affected.

At the time of publishing, Panera Bread's website remains down.

Original image has been replaced. Credit: Mashable

We've reached out to Panera Bread for comment on why it ignored Houlihan's warnings and failed to fix the flaw for eight months. We will update this article if and when we hear back.

---

Featured Video For You

---

Here's 5 tips for Spring cleaning your digital footprint

---

Topics Cybersecurity

• Entertainment
• Deals
• Life
• Tech
• Games
• Social Good
• Digital Culture
• Shopping

• History Won’t Save You
• The Morning News Roundup for November 25, 2014
• On Samuel Rutherford Crockett and the Word “Draffsack”
• Influencers aren't going anywhere. So what does that mean for today's teens?
• The Never-ending Story
• An Interview with Julia Wertz
• Once Upon a Potty
• Who Are These Future Rock
• Witch Kids of Instagram
• Listening to Paradise Lost

• 'Where is the CEO?' Google's founder skips shareholder meeting amid protests
• This interactive map helps shoppers find black
• Amazon's newest Kindle Oasis makes it easier to read at night
• PSA: Don't buy a used security camera
• You can bet on pugs racing in Christmas costumes to brighten your day
• Declassified spy satellite photos show melting of Himalayan glaciers
• 11 good things of 2016
• Resetting these smart lightbulbs is so dumb it's funny
• First reactions to Marvel's 'Spider
• A woman fell asleep on her flight, then woke up to an empty plane

• Bridging the Healthcare Divide in West Virginia
• An Interview with Michael Hofmann
• I tried the viral TikTok adjustable buttons and they actually work pretty well
• Sleep of the Just by Sadie Stein
• Sweet, Sweet Existentialism
• The Windows on the World Contest Finalists
• Polestar's new electric car will have a smartphone to match
• Annotations by Paul Muldoon
• Reverse Robin Hoods
• 'The Afterparty' Season 2 ending explained: Who killed Edgar?

• A Right to Police Accountability
• The Morning News Roundup for December 9, 2014
• René Magritte Was Born on This Day in 1898
• The Morning News Roundup for December 1, 2014
• The Long Battle for Medicaid
• The Morning News Roundup for December 4, 2014
• TikTok is reviving the 2014 Tumblr
• Why Migraines are the Most Glamorous of Headaches
• Foul Shot
• A Marvelous Crutch: An Interview with Brad Zellar