I was on the Wish List page on tenderfilet.com and noticed a search box. Being a curious monkey I entered ‘h’:
I was surprised to see this list pop up. The screenshot below is a partial screenshot of the results page:
It has the customers full name and address. Would you consider this a design flaw?
If you want to check this out on the live site click here.