A website that encourages people to share details of their online purchases with world+dog was caught exposing the complete credit card numbers of four of its users.

Blippy is one of the more glaring examples of the ill-conceived social exhibitionist craze sweeping the web. On Friday, its users got a taste of that fad's dark side when simple Google searches turned up 127 transactions that included the credit card numbers.

Blippy quickly apologized for the snafu and said it resulted from glitch that dated back to the website's beta testing. User profiles are supposed to be scrubbed of the corresponding credit card details so they show only the merchant and the dollar amount spent. But during testing, some of that information remained in the HTML code and was only discovered using Google.

Google said it removed the card numbers from searches a little more than two hours after it learned of the problem. Blippy officials were in the process of reaching the four individuals whose numbers were exposed. ®

Related stories

• Brokerage coughs up $375,000 for website breach (14 April 2010)

  https://www.theregister.com/2010/04/14/da_davidson_website_breach/

• Durex India eStore spills customers' personal details (26 March 2010)

  https://www.theregister.com/2010/03/26/durex_india_data_breach/

• Argos buries unencrypted credit card data in email receipts (5 March 2010)

  https://www.theregister.com/2010/03/05/argos_email_security_snafu/

• Foodies sue providers of hacked payment system (1 December 2009)

  https://www.theregister.com/2009/12/01/restaurants_sue_pos_providers/

• Network Solutions breach exposed 500k card accounts (25 July 2009)

  https://www.theregister.com/2009/07/25/network_solutions_ecommerce_breach/