The mishandling of a private key code used to sign into D-Link software, such that it was openly available on a public website for six months; and Leaving users' login credentials for D-Link’s mobile app unsecured in clear, readable text on their mobile devices, even though there is free software available to secure the information.