Staples data breach caused by bug in order tracking system

Exposed data. Letting clients track their purchases using just these two details is common and sufficiently secure, as long as order IDs are not sequential …