Gov PayNow.com Leaks 14M+ Records
Summary: Government Payment Service Inc., which operates GovPayNow.com and serves roughly 2,300 government agencies in 35 states, exposed more than 14 million customer receipts dating back to 2012 by allowing anyone to view records simply by altering digits in the receipt web address. KrebsOnSecurity alerted the company on Sept. 14, 2018, and two days later GovPayNet said it had addressed the issue, stating that receipts did not contain information usable to initiate a financial transaction.
What you should know: The exposed records included names, addresses, phone numbers and the last four digits of credit cards, and the sequential record numbers made it trivial to enumerate all 14 million - a flaw KrebsOnSecurity called simple to fix but commonly left unaddressed.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026