---
title: "goHardDrive Leaked Personal Data for Thousands of Customers"
url: https://daily.dev/posts/goharddrive-leaked-personal-data-for-thousands-of-customers-u8l7atihl
source_url: https://mtlynch.io/goharddrive-leak/
type: article
source: "Michael Lynch"
published: 2025-07-02T14:11:11.681Z
updated: 2025-07-02T14:11:33.529Z
tags: ["security", "privacy", "data-breach", "web-security"]
reading_time: 8
upvotes: 1
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# goHardDrive Leaked Personal Data for Thousands of Customers

**[Michael Lynch](https://daily.dev/sources/mtlynch)** · 8 min read · 1 upvotes · 0 comments

## Summary

A security researcher discovered that goHardDrive, a used hard drive retailer, was exposing thousands of customer records through an insecure RMA status check system. The vulnerability allowed anyone to access customer names, addresses, emails, and order details by simply guessing sequential RMA numbers. Despite initial attempts to fix the issue by adding ZIP code and house number verification, the researcher demonstrated this was still easily exploitable. goHardDrive ultimately removed the RMA status page entirely and now handles status updates via email only.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://mtlynch.io/goharddrive-leak/>

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments
- [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments
- [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#privacy](https://daily.dev/tags/privacy), [#data-breach](https://daily.dev/tags/data-breach), [#web-security](https://daily.dev/tags/web-security)

[View this post on daily.dev](https://daily.dev/posts/goharddrive-leaked-personal-data-for-thousands-of-customers-u8l7atihl)