Website submitted data leaked to competitors.

[dropshipnews]

I have a website with forms for collecting names and phone numbers of leads. After receiving a submitted form, the next day competitors call the client on filled number.

The question is simple, how difficult is it to track a leak and what options for identifying the problem would you recommend?
Thank you!

 

[Diabolink]

Have you considered the user did fill at least 2 forms on 2 different websites (yours and the next ranked competitor before/after you)
If it’s only the same competitor always calling the next day, maybe your competitor has a backdoor access to your database.

Change all passwords, use 2fa where possible (hosting>server admin>back office)

You can pay someone to have your website audited but check first what I wrote.

Good luck, I can audit for you if you don’t succeed.

 

[dropshipnews]

Thank you. I conducted a leak audit myself. I found quite a few errors that could have caused a leak.

Have you considered the user did fill at least 2 forms on 2 different websites (yours and the next ranked competitor before/after you)
If it’s only the same competitor always calling the next day, maybe your competitor has a backdoor access to your database.

Change all passwords, use 2fa where possible (hosting>server admin>back office)

You can pay someone to have your website audited but check first what I wrote.

Good luck, I can audit for you if you don’t succeed.

 

[Diabolink]

Thank you. I conducted a leak audit myself. I found quite a few errors that could have caused a leak.

I hope you managed to find and fix what caused the leaks!
in case not, don’t forget to change passwords and add 2fa as a rule of thumb