I've just tested this and thankfully I wasn't able to recreate the issue. In your settings for the 'Existing Contact' component, please could you check that the 'Enforce Permissions' checkbox is selected? It should be ticked by default. This should prevent viewing of other peoples' data.


Stripe is working with webform civicrm D8/D9 complete with test coverage.

Only top voted, non community-wiki answers of a minimum length are eligible