Problems with Venmo privacy were first highlighted way back in 2018 . A security researcher demonstrated how the API could be used to obtain an alarming amount of personal data about users of the digital cash app.
A related vulnerability was still in place in 2024 when it was used to highlight potentially embarrassing information about JD Vance. A new report says that the company is very belatedly fixing the problem …
The problem has been that both Venmo transactions and the messages which accompany them have been public by default, along with your contacts in the app. A security researcher who analyzed more than 200 million transactions gave five illustrative stories about the embarrassing level of information revealed.
This included the transactions of a cannabis dealer, and a couple seemingly living a soap-opera relationship.
“Please leave me alone,” said the woman, who Do Thi Duc refers to as Susana.
“I just love you.…