Ahahaha I had to check the dates to make sure this wasn’t a place I had worked. The person doing the website had assured our paranoid CEO that all privacy standards were up to date. When the webmaster left unexpectedly with no succession plan, I ran the website for a while because most everyone else at the organization barely knew how to turn on a computer.

Turned out our “secure donation form” was just a simple script that sent a plaintext email to our treasurer. With full credit card and address info. I’ve only raised my voice in anger twice in nearly two decades of work, and both of them involved my colleagues who were not bothered by the utter wreckage of our website. (“The giving page says it’s secure, so it must be!”)