This story is a bit incomplete because the Cincinnati Enquirer news article left a few questions unanswered.
First, the facts. Domino's Pizza, a $1.4 billion company with 8,700 retail outlets around the world "gave out" 11,000 free pizza's earlier this week in the Cincinnati, Ohio and Northern Kentucky area based on an on-line promotional coupon.
However, the promotional coupon was for a promotion that was supposed to run in December but was never approved.
Somehow, "an enterprising customer" as Domino's vice president of communications called him or her (a new name for hacker?) found the defunct coupon promotion still on Domino's website Monday evening and "discovered" that if you typed in the words, "bailout", you would get the coupon for a free medium pizza.
This "enterprising customer" spread the word to some other websites, and before Domino's deactivated the site 1030 Tuesday morning, some 11,000 free pizzas had been delivered across Cincinnati, Ohio and Northern Kentucky. One Domino's owner in Cincinnati said that his 14 stores delivered 600 free pizzas alone (which Domino's corporate headquarters will reimburse him for).
It probably is a good thing that the news didn't spread across the US.
The Cincinnati Enquirer story doesn't say why Domino's still had a defunct promotion on its website, why it was still able to be activated, or why anyone could easily get to it. Makes you wonder about Domino's web site security and configuration management. The website probably has a lot more "enterprising customers" searching for other holes this week than last.
If anyone has more details on this story, I would like to hear about it.







The Sandbox
The Risk Factor
Tech Talk
Nanoclast
Automaton




