Investigates

Action News Jax Investigates: Private online shopping exposed to everyone

JACKSONVILLE, Fla. — Many like to shop online as is it convenient to shop day or night, and they don’t have to go to the store. However, items you tag to come back to later and buy are public to anyone who wants to see them.

It was a surprise to a grandmother who thought only her family members could see her wish list on Amazon.

It took Action News Jax’s Paige Kelton 10 seconds to find her husband’s wish list.

Brian Hughes is a security engineer. He said the Amazon wish list can be used against you by anyone from private investigators to identity thieves.

"If that website's passwords aren't secure, you can get into that, find out what they're password is on that, and that can potentially be the password on email and once you get access to email it's done," Hughes said.

Jeremy Schoeneman of security information firm Secure State, calls Amazon wish lists a gateway. He proved the point by using one to hack into a friend’s Amazon account.

"Once we were able to change that person’s password, we can get on to the account and then view everything from the last four credit card numbers to their shipping address," Schoeneman said.

The easiest way to hide your wish list -- go to your account and scroll down to your lists, then over on the right side you’ll see list settings. Hit that button and then you can make all your lists private, then hit submit. Another way to protect yourself is by using your wish list the way it's intended, to give your family ideas on what to buy you and don't buy the items yourself.

“That's usually one of the questions the customer service reps will ask you what was one item you recently purchased and that's quick and easy right there,” Schoeneman said.

Trending on ActionNewsJax.com:


”Draft Draft Night in Duval: Thursday at 7PM on FOX30

Most Read