A security researcher systematically penetrated Slickwraps' core database due to basic API design flaws. When corporate management ignored notifications, the data (including customer orders, tracking details, and account histories) was publicized online.