No Need to Hack When It’s Leaking: App for outing Charlie Kirk’s critics leaked its users’ personal data

An app called Cancel the Hate, used to anonymously report individuals accused of criticising Charlie Kirk, leaked its users’ personal data and was taken offline while Straight Arrow News investigates the breach. The article notes the app launched in the wake of Kirk’s assassination on 10 September and invites users to submit “intel” on alleged offenders, including names, locations and employers.

It states that, although Cancel the Hate says submitters’ own data will not be made public, a companion social media-style app appears to have exposed personal details. The flaw was uncovered by a security researcher who identifies as “BobDaHacker,” and it allowed exposure of information such as email addresses and phone numbers. Email addresses were included in profile bios by default, seemingly unbeknownst to many users, and the data could be exposed even if privacy settings were enabled to keep it hidden. Read more at San[.]com.