(Mashable) -- Sharing your credit card and online purchases with friends on the web sounds risky and it is.





We've just discovered that several credit card transactions shared on social networking site Blippy have been exposed -- with full credit card numbers included -- in Google search results.





Tipster Trey Copeland wrote to us with a link to results for the search: site:blippy.com +"from card". That search returns results showing detailed purchase information for transactions. Each result highlights that there was a "debit card transaction" or "card transaction," the amount spent, the specific location (address included) and the full card number.





Blippy users who share their credit card and bank account information do so with the assumption that this information will remain private. Blippy addresses security concerns with the following statement on its website:





"Blippy is very concerned about safeguarding the confidentiality of your personally identifiable information. We employ administrative, physical and electronic measures designed to protect your information from unauthorized access. We will make any legally-required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored personal data to you via email or conspicuous posting on the Services in the most expedient time possible and without unreasonable delay, consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system."





Unfortunately it appears that there is a bug in the "administrative, physical and electronic measures" that ensure privacy, as Blippy's security system has been breached in a very public and unfortunate way.





Given the breach, we suggest that Blippy users who have authorized the site to access their debit or credit transactions take immediate action to revoke access. We've e-mailed Blippy, notified of them of the situation and will update this post when we know more.





© 2010 MASHABLE.com. All rights reserved.
Where is the bug? What has been breached? What does Mashable suggest? Who's security system has been breached? Where is there a bug? What did Mashable suggest? Who suggests users take immediate action?
"administrative, physical and electronic measures" Blippy's security system that Blippy users who have authorized the site to access their debit or credit transactions take immediate action to revoke access. Blippy "administrative, physical and electronic measures" Blippy users who have authorized the site to access their debit or credit transactions take immediate action to revoke access. Blippy
question: Where is the bug?, answer: "administrative, physical and electronic measures" | question: What has been breached?, answer: Blippy's security system | question: What does Mashable suggest?, answer: that Blippy users who have authorized the site to access their debit or credit transactions take immediate action to revoke access. | question: Who's security system has been breached?, answer: Blippy | question: Where is there a bug?, answer: "administrative, physical and electronic measures" | question: What did Mashable suggest?, answer: Blippy users who have authorized the site to access their debit or credit transactions take immediate action to revoke access. | question: Who suggests users take immediate action?, answer: Blippy