Yes Madam, a home salon, exposes customers’ sensitive data: Report
Yes Madam, a startup company that provides at-home salon and spa services, has inadvertently exposed the sensitive information of both its customers and gig workers due to a server-side error
Homegrown startup Yes Madam has exposed the sensitive data of its customers and gig workers due to a server-side misconfiguration, the media reported.
According to TechCrunch, since February 20, the startup has left a database containing the full names, mobile numbers, mailing addresses, and email addresses of hundreds of thousands of Yes Madam customers who have been connected to the internet without a password.
The media has reported that Yes Madam, a startup company that provides at-home salon and spa services, has inadvertently exposed the sensitive information of both its customers and gig workers due to a server-side error. TechCrunch reported that a database containing the personal information of hundreds of thousands of Yes Madam customers, including full names, mobile numbers, mailing addresses, and email addresses, was left accessible to the internet without a password since February 20. The database also contained additional details, such as customers’ location data, payment links, and user device details. Yes Madam operates in over 30 cities in India, according to its website, and offers services like massage, spa, therapies, and male grooming.
According to the report, Yes Madam’s mobile applications were downloaded more than a million times. Additionally, the startup inadvertently revealed the profile pictures, names, and mobile numbers of gig workers who use the platform. The database contained information on over 900,000 users, as reported by security researcher Anurag Sen from CloudDefense.ai, who discovered the exposed database. Nevertheless, the report stated that Yes Madam has since secured the database.
In addition, customers’ location data, including latitude and longitude values, as well as payment links and user device details, such as model names and IMEI numbers, were included in the database.
Yes Madam is a Home Salon and a tech-enabled platform for beauty and wellness that brings salon and spa services to customers’ homes. It operates in more than 30 cities in the country, according to the company’s website.
The platform provides at-home salon services such as therapies, massage, spa, and male grooming.
