A security researcher, Sam Curry, recently noticed what he called "suspicious" API calls when ordering a Starbucks gift card for a friend. After learning that Starbucks runs a bug bounty program, Curry dug a little deeper. Soon thereafter, Curry found that Starbucks had potentially exposed personal records of around 100 million customers.
Security Researcher Saves 100 Million Starbucks Customers' Personal Data From Exploitation
