TLDW:
Over 600K RMA records were exposed publicly due to their intranet site being exposed publicly, without auth and for all crawlers to see.
Proof of purchase links allegedly publicly accessible, not crawlable.
Records include customer information such as emails, phone numbers, addresses.
The...