[politicket]

...allowed the data to be scraped from the site.

I doubt it - but if it's true that they could access a donor list view through poor security practices then GiveSendGo will have completely lost credibility.

I hope that's not the case. I really do.

[MercyFlush]

The list is pretty damning.

Each entry includes:

Hashed credit card number
Type of credit card (VISA< MasterCard, etc.)
Date and time of donation
First and last name
email address
ZIP code
IP address

Vindictive employers could use the date and time in conjunction with the IP address to show someone made this donation during work hours and then use that to justify termination.

I also suspect some of these people will lose their jobs simply for being on the list.