12

Recently, I found a user had posted a complete copy of their credit card magstripe in a question on Security SE. As I did not have 2k rep on that site at the time I could not force an edit to hide the information.

I flagged the post, commented, edited, and tried to find someone on chat to help with this issue, but it took a while (~12 hrs), during which the complete card data was available (except for their name, which the user redacted, although they had a name on their account).

I reported the issue to the issuing bank, which should reduce the impact, but was this the correct way to handle this, and is there anything I should have done differently? Should a different procedure be followed for credit card numbers than for email addresses?

14

Irrespective of any actions that you take outside of the site, I think that you should flag the post and ask the moderators of that site to redact the information:

When to redact revisions?

Even if you could edit the information out I think that it should also be redacted from earlier revisions.

Once it gets a mod's attention via a flag they can commence redacting and use their own mod room to get attention of another per-site mod to approve the redaction, and depending on the perceived urgency (this one looks urgent), raise it in the all-sites mod room to get the attention of an SE employee.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .
{"cc_re__cc_re__cc_by_sa_3_0": ["<li class=\"-item\"><a href=\"https://www.facebook.com/officialstackoverflow/\" class=\"-link\">Facebook</a></li>\r\n                    <li class=\"-item\"><a href=\"https://twitter.com/stackoverflow\" class=\"-link\">Twitter</a></li>\r\n                    <li class=\"-item\"><a href=\"https://linkedin.com/company/stack-overflow\" class=\"-link\">LinkedIn</a></li>\r\n                </ul>\r\n\r\n                <p class=\"mt-auto mb24\">\r\nsite design / logo &#169; 2019 Stack Exchange Inc; user contributions licensed under <a href=\"https://creativecommons.org/licenses/by-sa/3.0/\" rel=\"license\">cc by-sa 3.0</a>\r\n                            with <a href=\"https://stackoverflow.blog/2009/06/25/attribution-required/\" rel=\"license\">attribution required</a>.\r\n                    <span id=\"svnrev\">rev&nbsp;2019.7.15.34328</span>\r\n                </p>\r\n            </div>\r\n        </div>\r\n\r\n            </footer>\r\n            <script>StackExchange.ready(function () { StackExchange.responsiveness.addSwitcher(); })</script>\r\n    <noscript>\r\n        <div id=\"noscript-warning\">Meta Stack Exchange wo"], "copyright__copyright__copyright": ["it the information out I think that it should also be redacted from earlier revisions.\n\nOnce it gets a mod's attention via a flag they can commence redacting and use their own mod room to get attention of another per-site mod to approve the redaction, and depending on the perceived urgency (this one looks urgent), raise it in the all-sites mod room to get the attention of an SE employee.\n\nYou must log in to answer this question.\n\nNot the answer you're looking for? Browse other questions tagged ."]}