A viewer of CBS Sacramento discovered that he could type in pretty much any random five-digit number and the kiosk would let the credit card transaction go through. So why does Redbox ask for it?
This is a particular concern in California, where it’s illegal for businesses to collect their customers’ zip codes unless there’s a legitimate reason to do so. For example, credit card verification. If Redbox is collecting zip codes for customer research, that isn’t just lying: it’s illegal.
Interestingly, Redbox refused to comment on why they’re collecting zip codes.
Call Kurtis: Redbox Kiosk Security Flaw Exposed In ZIP Code Use [CBS Sacramento]