Story image

Online retailer Mighty Ape fixes wishlist privacy flaw

07 Feb 2019

New Zealand online retailer Mighty Ape has been quick to 'fix' issues that publicly shared some customers’ birthdates and product wishlists.

Mighty Ape has more than 250,000 customers and sells a range of technology, clothing, games, books and puzzles, music and other items.

One of its account settings allows customers to add products to their ‘wishlists’ for future review or purchase. Users can choose to keep these wishlists private or public – although it seems many were unaware those options existed.

Last week users on various forums including Reddit and GamePlanet alerted others to the fact that Mighty Ape wishlist privacy settings were, in some cases, public and available for anyone to see.

Public information included names, emails, birthdates and all products available on a user’s wishlist. 

While the issue only affected those whose wishlists were public (either by choice or by default), Mighty Ape quickly moved to rectify the issue.

Yesterday (February 6), Mighty Ape sent an email titled We're improving our Wish List privacy settings to users stating that the company had fixed the issue. The email says:

“Protecting the interests of our customers is extremely important to us. From today onwards, all new Wish Lists will be created as private by default. Customers will still be free to share links to their Wish List with loved ones, but their list will not show up in our 'Find a Friend's Wish List' search.

“We have also removed the year from the birth date field in our search results. Additionally, you must now opt-in to showing your birth date from the 'Edit List' menu on each of your Wish Lists. The purpose of the birth date is to make it easier for people to identify a Wish List as yours, but we understand this information can be sensitive.

“To give everyone the opportunity to decide if they would like their Wish List to be searchable; all existing Wish Lists have been set to private.

“If you would like your Wish List to remain private, you don't need to do a thing. If you would like your friends and family to be able to search for your Wish List, you will need to navigate to your Wish List, scroll to the bottom of the page and click 'Make my Wish List public'. Your Wish List will then be viewable from the 'Find a Friend's Wish List' page if someone searches for your full name or your email address. Each Wish List has its own independent privacy settings so you will need to update each list individually.”

This Iron Man drone wants you to fly like a superhero
Iron Man must be one of the most popular superheroes of 2019 – because this year he has been transformed into a robot, and now he’s styled as his very own drone.
HP back on board with Emirates Team NZ
HP 3D print technology will supposedly help the team innovate at speed.
Do you use the Peel Smart Remote app? Delete or update it now
Peel Smart Remote could leak your personal pictures, information, and documents to an unknown server.
How printing solutions can help save the planet
Y Soft has identified five key ways organisations can become more economical and reduce their environmental impact.
Information is power when choosing electricity plans
While 90% of respondents knew their average power bill over the summertime, more than half didn’t know their kilowatt hour (kWh) price, or their monthly usage amount. 
A quick look at Haier & LG's take on the smart home revolution
Haier is going all-in on the smart home revolution – and it believes your home should be smart all the way from the laundry to the bedroom.
An 8K TV for $80,000? Samsung has you covered
8K televisions have landed in New Zealand, but they come with eye-watering price tags of up to $80,000.
Scammers targeting more countries in sextortion scam - ESET
The attacker in the email claims they have hacked the intended victim's device, and have recorded the person while watching pornographic content.