Fashion retailer Express left customers’ personal data and order details exposed to the internet

Fashion retailer Express left customers’ personal data and order details exposed to the internet

The first StrictlyVC of 2026 hits SF on April 30. Tickets are going fast. Register now. Save up to $680 on your Disrupt 2026 pass. Ends 11:59 p.m. PT tonight. REGISTER NOW. TechCrunch Desktop Logo TechCrunch Mobile Logo LatestStartupsVentureAppleSecurityAIApps EventsPodcastsNewsletters SearchSubmit Site Search Toggle Mega Menu Toggle Topics Latest Fashion retailer Express left customers’ personal data and order details exposed to the internet Zack Whittaker 5:39 AM PDT · April 16, 2026 Fashion giant Express has patched its website to fix a security flaw that allowed anyone to view other people’s order details and personal information, TechCrunch has exclusively learned. At least a dozen of Express’ customer orders had been publicly listed in web search engine results. The security flaw exposed order confirmation pages on Express’ online store, revealing details of purchases and who made

Source: https://techcrunch.com/2026/04/16/fashion-retailer-express-left-customers-personal-data-and-order-details-exposed-to-the-internet/