Donate for the Cryptome archive of files from June 1996 to the present


15 July 2014

Formech Customer Database


A sends:

Formech International (www.formech.com) manufactures vacuum forming machines (manual and fully automatic) for diverse markets including theatre/tv/film special effects, medical, defence, aerospace, education, modelling, product development prototyping and full commercial production lines.

Founded in 1982, based in Chicago, IL, USA; Harpenden, Hertfordshire, just
north of London, UK; plus Leimersheim in Germany.

http://www.formech.com/FORMECH_CATALOGUE_ENGLISH_2012.pdf

https://www.youtube.com/user/Formech

Customers include Apple, Microsoft, Raytheon, Lockheed Martin, BMW, Volkswagen, Honda, Royal Shakespeare Company, Cambridge University, University of California (Berkeley), Police Service of Northern Ireland and even MI5, MI6 (under aliases known to journalists) and the UK's military research laboratories at Porton Down, Wiltshire.

Formech states itself that their customer base reads like a Who's Who.

So it is unfortunate that Formech leaves its accounts system (via a matching .NET domain, supposedly behind a login) wide open for casual public viewing and Google indexing:-

https://www.google.com/search?q=site:formech.net&filter=0

With such goodies as this:-

http://formech.net/finance/downloads/customer_bankings.asp

and

http://formech.net/contacts/enquiries/level2.asp

In particular, Apple's purchase of a brand new HD686 machine at $85,000 due for delivery at the end of August 2014, naming Apple's Senior Packaging Engineering Manager Mark Doutt as the key contact.

http://formech.net/contacts/enquiries/level_2_enquiry.asp?enquiryID=1354&leadID=6095

http://formech.net/sales/sales_invoice.asp?serialno=40205

The usual response to these data scandals is to blame a hack attempt on the company's servers, even blaming it on the person revealing it. The truth is nearly always an incompetent IT department and web designer coupled with a blissfully clueless CEO.