These Chrome And Firefox Extensions Put Your Privacy At Risk

Geoffrey A. Fowler writing for The Washington Post

What he showed me made my jaw drop. Three examples:

  • From DrChrono, a medical records service, we saw the names of patients, doctors, and even medications. From another service, called Kareo, we saw patient names.
  • From Southwest, we saw the first and last names, as well as confirmation numbers, of people checking into flights. From United, we saw last names and passenger record numbers.
  • From OneDrive, Microsoft’s cloud storage service, we saw a hundred documents named “tax.” We didn’t click on any of these links to avoid further exposing sensitive data.

Be careful which browser extensions you install and use.