Industrial supply company W.W. Grainger has issued a password reset after discovering a coding error in their mobile app that put usernames and passwords at risk. Nicely done:
At Grainger, we take data privacy and security very seriously. As part of a system review, Grainger’s IT team recently identified a coding error in the Grainger.com mobile apps for iPhone and Android that resulted in the collection and storage of unsecured user names and passwords on the Grainger system. We learned on October 27, 2015 that the information was inadvertently stored in a system file that was at potential risk of unauthorized access. The issue was immediately fixed, and we continue to work with outside experts to further strengthen our coding review protocols. Please note that no payment card information or other personal information were affected by this issue. In addition, we have not received any reports of ID theft or fraud attributable to this matter.
Read more of their notification on the California Attorney General’s web site (pdf).