Over the weekend, the tech YouTube channel PC Gamers Nexus reported that personal details of customers of computer component maker ZOTAC had been leaked onto the web due to the company's carelessness in the way they stored these customers' data.
What has happened is that a viewer of the YouTube channel has sent his own component to ZOTAC for repair, and after registering the details in the RMA (Return Material Authorization (RMA) form for repair or replacement), the individual has tried to find the details given to ZOTAC to see if it can be found via Google search.
Unfortunately, not only the individual's details can be found, but also hundreds of other ZOTAC customers who have registered on this RMA form, and are waiting for their components to be repaired.
This matter was then reported to Gamers Nexus, who then informed ZOTAC that this leak should be taken appropriate action, such as encrypting this RMA document which contains many personal details of their users.
According to Gamers Nexus, the details that can be seen include full name, phone number, email address and even home address. Apart from that, other confidential information that can be seen by the public includes invoices to other computer companies and also the personal details of their own employees, such as social security numbers and so on.
When a Zotac RMA search is made, the URL listing is still visible, but when the link is clicked, the confidential details in the documents are no longer shown, and it appears that ZOTAC has fixed access to these documents.