Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Forums › Off topic › Mighty Ape website logging me in as different users
boosacnoodle

1342 posts

Uber Geek
+1 received by user: 907


#319696 22-May-2025 23:07
Send private message

I just now logged into Mighty Ape and, concerningly, on every other page refresh it is logging me in as someone else. It's given me several different user accounts.

 

Not only is it concerning that I could potentially place an order on their account, but I can see their credit card details, home addresses, emails and full order history.

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5
freitasm
BDFL - Memuneh
80806 posts

Uber Geek
+1 received by user: 41411

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3375803 22-May-2025 23:15
Send private message

Not good. Contacted them yet? 




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 



michaelmurfy
meow
13616 posts

Uber Geek
+1 received by user: 10982

Moderator
ID Verified
Trusted
Lifetime subscriber

  #3375804 22-May-2025 23:22
Send private message

I just verified this. 

 

I never use Mightyape so wasn’t logged in, however I was. I could see everything including name, address and there was a credit card linked. There was nothing stopping me from potentially placing an order. 

 

This is bad… I’ve tried a few email addresses now to let them know but just get bounce backs. Appears to be somewhat resolved now. 




Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

michaelmurfy
meow
13616 posts

Uber Geek
+1 received by user: 10982

Moderator
ID Verified
Trusted
Lifetime subscriber

  #3375807 23-May-2025 01:43
Send private message

And just now I got an email from somebody random who was logged into my account and also provided me screenshots of my account showing personal information. I went ahead and treated this account as compromised, changed my password and logged out hopefully invalidating all session cookies. We’ve both raised a case with Mightyape and I’ll contact CERT.

 

Same thing applied with him - he was fully logged into my account and could see anything along with potentially place orders. 




Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.



rscole86
5001 posts

Uber Geek
+1 received by user: 463

Moderator
Trusted
Lifetime subscriber

  #3375808 23-May-2025 06:10
Send private message

Tried my two accounts, no problem at 530 this morning. 

Qazzy03
548 posts

Ultimate Geek
+1 received by user: 496


  #3375810 23-May-2025 06:35
Send private message

I just logged into my account, and it was successful. 

 

I did remove my saved payment information information though.

xpd

xpd
Geek of Coastguard
14148 posts

Uber Geek
+1 received by user: 4608

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #3375865 23-May-2025 08:20
Send private message

Wow.... be highly surprised if they publicly admit it within the next 24hrs. 

 

 

 

 




XPD / Gavin

 

LinkTree

 

 

 

 
 
 
 

Shop now for Dyson appliances (affiliate link).
networkn
Networkn
32925 posts

Uber Geek
+1 received by user: 15531

ID Verified
Trusted
Lifetime subscriber

  #3375872 23-May-2025 08:41
Send private message

xpd:

 

Wow.... be highly surprised if they publicly admit it within the next 24hrs. 

 

 

I'd expect them not to, until they complete an investigation into what is wrong, what caused it, and what data has been accessed so they can actually make a disclosure. 

 

Their website redesign has been a pretty sad tale of woe. 

 

Quite a shame as they were actually doing pretty well prior to that, I thought things were actually on par or slightly better than before Kogan bought Mighty Ape. 

 

 

Mrcutiepatootie
52 posts

Master Geek
+1 received by user: 32

ID Verified

  #3375874 23-May-2025 08:46
Send private message

We knew the mighty have fallen for quite some time now.. oh it's still falling?

 

Just falsified info on my mighty account. It also doesn't help when changing the email address, they send out the email verification to the current one saying "Your Mighty Ape email address has just been changed to [current email address]." instead of showing what email address it's being changed to.

freitasm
BDFL - Memuneh
80806 posts

Uber Geek
+1 received by user: 41411

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3375875 23-May-2025 08:49
Send private message

And this, people, is why I never click the "Save the credit card info for faster checkout next time" on any service.




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 

freitasm
BDFL - Memuneh
80806 posts

Uber Geek
+1 received by user: 41411

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3375878 23-May-2025 09:02
Send private message

I reached out to someone at Mighty Ape. I explained how this happens to some people when logged in, but it's unknown how many people have their information leaked.

 

I pointed out to this thread and mentioned your case specifically @michaelmurfy, based on the details you passed (email).

 

This is being investigated.




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 

Jizah
241 posts

Master Geek
+1 received by user: 23


  #3375879 23-May-2025 09:04
Send private message

freitasm:

 

And this, people, is why I never click the "Save the credit card info for faster checkout next time" on any service.

 

 

 

 

This still won't stop me. It might if I used a Debit Plus.

 
 
 
 

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).
michaelmurfy
meow
13616 posts

Uber Geek
+1 received by user: 10982

Moderator
ID Verified
Trusted
Lifetime subscriber

  #3375882 23-May-2025 09:10
Send private message

I've also notified CERT NZ (despite it being a privacy issue) along with the Privacy Commissioner as I've got verification my own account was compromised in this incident. Yet to hear back from Mightyape.




Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

RockCartel
19 posts

Geek
+1 received by user: 5


  #3375885 23-May-2025 09:17
Send private message

freitasm:

 

And this, people, is why I never click the "Save the credit card info for faster checkout next time" on any service.

 

 

This 100% , it's not worth the minor convenience. 

freitasm
BDFL - Memuneh
80806 posts

Uber Geek
+1 received by user: 41411

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3375888 23-May-2025 09:24
Send private message

RockCartel:

 

freitasm:

 

And this, people, is why I never click the "Save the credit card info for faster checkout next time" on any service.

 

 

This 100% , it's not worth the minor convenience. 

 

 

Look, I might be wrong and something happens tomorrow. But I have had credit cards since 1989 and never had to cancel or change a number.

 

I know some people who cancel cards every quarter because there's always a "strange transaction". This causes a lot of problems when they have energy, broadband, mobile and other services on auto-payment from credit cards. Not even thinking of the actual possibility of fraudulent transactions.

 

No joke. Really.




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 

heavenlywild
5110 posts

Uber Geek
+1 received by user: 907

Trusted

  #3375990 23-May-2025 13:53
Send private message

In the news now:

 

https://www.stuff.co.nz/nz-news/360699792/mighty-ape-glitch-allegedly-let-users-log-strangers-accounts-see-credit-card-info

 1 | 2 | 3 | 4 | 5
View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.








RSS feeds
Main feed
Forums feed
Copyright
©2002-2026 Geekzone®
Site features
Geekzone BI dashboard
Geekzone Badges
Geekzone Status Page

 

Site Information
Subscribe to Geekzone
Privacy Statement
Forum Usage Guidelines (FUG)
Advertising
Trademark and copyright