There are thousands of personal date have been exposed by the new Kardashians website with its new apps collection and websites, leaving more than 890,000 fans' personal information open to the hackers.
According to reports, Alaxic Smith showed a screencap on his own published blog post, flaunting the names and personal emails of 660,000 subscribers of the website. The screencap has been immediately removed since the incident was found out.
Adding to the alarming security concerns that the Kardashian website has brought to their followers, Kylie Jenner's site is reportedly the most popular, which is powered by the Whalerock Digital Media.
Alaxi Smith, who is a young web designer and engineer, wrote in a statement saying that he had completed a whole working day last Monday, September 14, when he apparently overheard the news about the new family website of the Kardashians with a set of apps connected to a 'pay-for-subscription service'.
Upon hearing the news, Smith tried to look for holes which powered the popular website and he discovered an open API. This would mean that he could easily put some 'basic' code into the browser that would present streams of personal data after logging in.
"I'll admit it, I downloaded Kylie's app just to check it out," he wrote in his blog post which has been removed but is still available as a cached. "I also checked out the website, and just like most developers, I decided to take a look around to see what was powering the site."
He went on saying, "I started digging a little bit deeper and found a JavaScript file named kylie.min.75c4eae105ad8689f88270895e77cb0_gz.js. Just for fun, I decided to un-minify this file to see what kind of data they were collecting from users and other metrics they may be tracking."
Smith was surprised to see the 891,340 subscribers' personal data, which showed more than 600,000 from Kylie Jenner's site were exposed.
Khloe Kardashian's site is the second most popular with 96,635 subscribers, Kim with 80,679 subscribers and Kendall with 50,756. Reports say that Smith's blog post was forced to delete and he has been banned from speaking to the media.
