Skip to content
Hacking Starbucks and Accessing Nearly 100 Million Customer Records
samcurry.net | blog | #bug-bounty | #access-control | #data-exposure | #api-security | #starbucks | #bff
Summary
A Starbucks gift-card purchase tipped Sam Curry to suspicious /bff/proxy/ API calls; probing the backend-for-frontend routing ultimately exposed nearly 100 million customer records.
- Published
- Collected