CA Security Advisor Research Blog

This is an update to my blog post from yesterday evening. As of this afternoon, Sears has removed the "Sears Purchase History" box along with the "Find your products" button from the home profile page on managemyhome.com. Logging into the site and then attempting to access the search results page via a bookmarked URL produces the following result:

As far as we have found, this means that there is no longer a method of using the managemyhome.com web site to search for other individual's purchase histories. We applaud Sears's acting to prevent the further exposure of this information, and are happy to see them reacting so promptly. It is our hope that they will take similarly responsible actions regarding the SHC Community, which continues to present serious privacy concerns as previously described.