Security Researcher Shaikh Yaser Arafat reported to GBHackers On Security. There were nearly 4,76,569 redemption codes available in the system starting from XXX00033 to XXX76602 (as on 8th Nov 2017 12:15 AM) with actual customer information. No OTP / password authentication was implemented on the login page: Without OTP verification/password authentication, anyone can view other HP customers Name, City, Company, State, Zip code, Laptop Model Number, Serial Number, Product Part Code, Purchase Date, and Claim Status by entering the Consecutive redemption codes in the homepage.”]
Source: https://gbhackers.com/hp-exposed-sensitive-information-online/