Fix · Security mistakes

Customer data was exposed or sent to the wrong person

UrgentSecurityKuwait and GulfNot checked against the vendor's current screens

What you may see

An email, a file or a page showed customers' details to others
A customer complains they saw someone else's order

Most likely cause

Data reaches the wrong person when pages, files, emails or database rules are not checked per customer, or when a file link is public.

Check first (about two minutes)

What exactly was shown, to whom, and for how long? Write the facts, with times.

The fix prompt

What you type here never leaves your browser. The search runs on this page, and nothing is sent to a server or to an AI.

The exact error or what you see

What you did before it happened

Kept only in this browser, on this device. Keys and passwords are removed before anything is saved.

Prompt language

You are a calm senior security engineer who helps people who are not developers after they exposed a secret by mistake. I am not a developer, so explain every step in plain words and tell me exactly which button, menu or command you mean. If you are not sure about something, say so; do not guess.

This is urgent. Do the safety steps first, before anything else.

Menu and button names change over time. If you cannot find a button or page I mention, say so and tell me what to look for instead of guessing.

I am in Kuwait. If the service has a Kuwait or Gulf rule or option that matters here (for example KNET, Arabic right-to-left text or local time), take it into account.

THE PROBLEM
Customer data was exposed or sent to the wrong person

THE EXACT ERROR OR WHAT I SEE
[paste the exact error here]

WHAT I DID BEFORE IT HAPPENED
[write in a few words what you did before it happened]

MOST LIKELY CAUSE
Data reaches the wrong person when pages, files, emails or database rules are not checked per customer, or when a file link is public.

DO THESE STEPS, IN THIS ORDER
1. Help me stop it first: find and close the path (the page, the link, the file, the policy), without deleting evidence.
2. Help me list who was affected and what data (names, phones, addresses, orders), from logs and the database, read only.
3. Help me write a calm, honest message to affected customers and explain what I should check about my duties to tell them or an authority. Say clearly that you are not a lawyer and I must check the rules that apply to me.
4. Add the permanent fix: per-customer checks on the server for every page, file and email, private files with short-lived links, and tests with two test customers.
Stop and tell me if what you see does not match a step. Do not skip ahead.

CHECK THAT IT WORKED
- Two test customers cannot see each other's data anywhere, and the affected customers have been informed.
Tell me exactly what I should see on the screen when it works.

DO NOT CHANGE
- Do not delete logs or records.
- Do not contact customers before I have approved the message.
- Anything I did not ask about: the design, the text, other pages, other settings or the data.
- Do not delete files, data or branches, do not reset or force-push, and do not rewrite history, unless you first show me exactly what would be lost and I say yes.
- Do not paste, print or ask me to paste a password or secret key into this chat. If one is needed, tell me which settings page of the right service to store it in.

WHEN YOU FINISH
Explain in simple words what you changed (file by file or setting by setting), why you changed it, and how I can undo it.

Paste it into Claude, ChatGPT, Gemini or Cursor, then follow what it says.

After you tried it, did it work?

Steps

Help me stop it first: find and close the path (the page, the link, the file, the policy), without deleting evidence.
Help me list who was affected and what data (names, phones, addresses, orders), from logs and the database, read only.
Help me write a calm, honest message to affected customers and explain what I should check about my duties to tell them or an authority. Say clearly that you are not a lawyer and I must check the rules that apply to me.
Add the permanent fix: per-customer checks on the server for every page, file and email, private files with short-lived links, and tests with two test customers.

Do not do this

Do not hide the problem or blame the customer.
Do not delete logs or records.
Do not contact customers before I have approved the message.

Try another entry

Customer data was exposed or sent to the wrong person

What you may see

Most likely cause

Check first (about two minutes)

The fix prompt

Steps

Do not do this

Related

How can we help?