Found this on another board as a warning, figured I'd pass it along as it seems pretty fawked up to me.

Their order tracking system will throw out your name, adress, and what you have ordered in the last 120 days, to anyone who punches in a zip code and your last name.

http://www.sportsmansguide.com/net/OrderStatus/OrderDisplayNew.aspx

I tried it just for grins, punched in my zip, and just put in smith as a last name (since it's fairly common), I now know the guys full name, address, and that he likes Nike athletic wear size large. No biggie untill you think about someone less than honest wanting a firearm, now he can tell what type of gun from what you ordered, as well as where you live.

Or how about this scenario?

"Hello Mr. Smith, we noticed you ordered a xxxxx from us. We were having a problem processing your credit card. Can you verify it ends in (insert random number) 2932. That's not it? That could be the problem. Let's start verifying your information is correct.

Your address is xxxxxxxx
The Item ordered was xxxxx
and your credit card number is:

Thank you sir, your UPS shipping number will be .... xxxxx

On behalf of sportsman's guide, Have a wonderful day,.



If you've ordered from them, be careful.

Wow creepy... It just showed me all the stuff Paige ordered from them for Xmas

Wow... I just looked up a person in Chandler AZ and now know that he has two guns... :eek:

If you or anyone you know has ordered from Sportsman's Guide, let them know about this, then tell them to call and complain so they fix it.

I'm finding all sorts of people's orders.

that is a huge liability loophole they have there

have you guys emailed or contacted them about it? I would hope they would change it

have you guys emailed or contacted them about it? I would hope they would change it

I used their contact forms.

I was able to see what 2 of my neighbors ordered.

I emailed them the following through their site.


Hi there.

I am not a customer, however, I now know a lot about your customers thanks to your order update page.

http://www.sportsmansguide.com/net/OrderStatus/OrderDisplayNew.aspx

Granted I am an honest person and won't actually do anything with this information, but I will try to make you aware of the problem. I'm sure the guy 5 streets over doesn't want anyone to know that he has several firearms, or know what he ordered for those firearms. Not to mention the leg up this gives someone looking to venture into identy theft.

Please look into repairing this error so that your customers information is more closely guarded.

Sincerely,
Kwrangln

Looks like they fixed it, it makes you enter a street address now.

Looks like they fixed it, it makes you enter a street address now.

nope still last name and zip code.

Yeah, you have to do that first. Then the address, at least that's all I can make it do.

Yeah, you have to do that first. Then the address, at least that's all I can make it do.

nope, can still enter neighbor's last names and the zip code and it pops up their order information, address, tracking numbers etc

Yeah, you have to do that first. Then the address, at least that's all I can make it do.

oh, well for me when I click the link I just entered "green" in the last name and my zip and I got a guys complete order and address to pop up. He is kinda wierd I think, he ordered a deep fryer, alfred hitchcock the legend begins, 3 different pairs of wheat colored slippers, a roll bootie, and a first aid kit. something aint right here

I just typed in smith and my zip code and got a guy down the street:shaking:

Ok, I guess it wanted an address because there was more than one Johnson in my zipcode. I tried some other names and it gave me all the info.... shitty.

At least I'm not in that system.

Thank you for your email.
Thank you for submitting your comments to us. All comments are viewed and taken into consideration. Management is aware of the situation and they are looking into it.


If you have any questions, please contact us.



Thanks for shopping the Guide!
Brett Holik
Customer ServiceVisit our Website at www.sportsmansguide.com
Please retain your Customer ID Number 3680846 for order status and fast Express Internet Checkout.
Top sellers: http://www.sportsmansguide.com/section/section.asp?s=2283
SPG Email sign up: http://www.sportsmansguide.com/email/specials_form.asp
Buyers Club Sign-up: http://www.sportsmansguide.com/club/club_tour.asp
Customer Service Phone Number 1-800-888-5222
Customer Service Fax Number 1-651-552-5305
The Sportsman's Guide
411 Farwell Ave
So St Paul, MN 55075


replied