'Expedia sends customer login & password out on marketing mailer'

Mark East (64.203.55.242) -

I just received a mailer in my mailbox for Expedia's Elite Plus program that had my email address and Elite Plus access code printed, one below the other, underneath a little flap at the bottom of the card. If someone were to have taken this card out of my mailbox and opened the flap, they would have had access not only to my Expedia Elite Plus account and the personal information contained therein, but to other websites and accounts for which I use that same password. This is, without question, the most reprehensible, most unsafe and just plain dumbest thing I have ever seen an online company do.

I am posting about this on every Internet-security related blog and message board I can find in hopes that it has even a minuscule impact on their operations. They have also lost a 10-year Expedia customer as a result of this. I sincerely hope whoever was responsible for this ridiculous breach of customer confidentiality is terminated immediately.

Comment #1 Martin from Kansas -

I don't want to in any way justify what Expedia did...

BUT.. "other websites and accounts for which I use that same password."

Never use the same password for more than 1 important site.

Comment #2 Tara Kelly (PassPack) (89.97.35.67) -

Expedia's move was NOT smart, and you have every right to be upset.

That said, I have to agree with Martin. You should not be reusing passwords across accounts. Things like this happen all the time.

If you have a hard time remembering passwords, choose and use a password manager. But by all means, stop reusing the same one.

Name:           
E-Mail:         

Optional (please add to our directory first)
Web Link:       
Link Title:     

Message:

Note: once you register your email address with Privacy it is used across our whole network of forums and blogs. You can create seperate profiles for each forum or blog, but use the same login.