
- Consentik, a cookie consent & consent management app for Shopify, kept sensitive data in an open archive
- The archive was available for at least 100 days, if not more
- It included site analytics data, Shopify Personal Access Tokens, and Facebook Auth Tokens
A major, reputable Shopify plugin, was leaking sensitive information for months, exposing hundreds of ecommerce businesses to all sorts of risks, experts have warned.