🎯 New Report #3828431: PII Exposure of Credit Applications and Social Security Numbers equifax-6070.my.salesforce-sites.com (Salesforce guest user)
🔺Severity: High
👽 Reporter: dr32
⭐️ Reputation: 432
🛠 State: resolved
💼 Team: Equifax-vdp
💵 Bounty: null
🕐 Submitted: 2026-06-27
⏰ Disclosed: 2026-09-06 10:03:04
📝 Summary: A Salesforce community portal belonging to Equifax was found to be leaking tens of thousands of credit reports and other sensitive financial information. The portal's Salesforce guest user profile and sharing settings granted unauthenticated access to multiple objects, including Contact, Online Credit Application c, and related financial data. This exposure allowed an anonymous user to read a large number of records containing sensitive personally identifiable information.
📂 Report JSON File: 3828431
@hackeronereports