We've heard the warnings: Before you do business on the Internet, make sure it's a secured Web site.

But as Target 11's Karen Welles found, at least one "secured site" isn't so secure after all.

It's called Bidpay; Western Union's Web site where you can buy money orders to pay for things online like items you've won at auctions.

But somehow, personal information from about 150 customers ended up in a local woman's hands.

Robbyn Braverman says, "I knew immediately that this was a gross breech of security."

Braverman recently signed up with Bidpay, Western Union's service where you can send money online.

She emailed Bidpay's customer service and in return she received a huge file of customer's names and their personal information: home addresses, what they bought, and credit card numbers. When printed out, it's 13 pages full of what's supposed to be confidential information from Bidpay customers across the country and around the world.

Braverman says, "I immediately knew there was something wrong."

Robbyn contacted Bidpay and sent back the list, but also emailed some of the people on it. "They were livid, they were very grateful of course that that I brought it to their attention but they were livid they were fuming."

Those she got a hold of told her they had not been notified by Bidpay that something was wrong.

In scrolling thru the list, an entry from the Pentagon credit union caught her eye and our's.

Dorothy Esce says, "When she emailed me all my information was there it was in black and white. Just every all my banking accounts."

We asked our NBC affiliate in Honolulu to track down Dorothy Esce, whose husband is a colonel in the United States army.

She, in turn, notified the Pentagon. Esce says, "The Pentagon closed all my accounts my savings accounts my mortgage accounts, everything they shut everything down because all that information was on this email."

But when she tried to contact Bidpay? "I have gotten the runaround. I have spoken to individuals that are in the security department of Bidpay and they tell me that I have to call this number then that number and I am getting absolutely no response," Esce said.

If you try to email Bidpay, you're told "due to technical issues, there have been delays" in replies.

Target 11 did get a response from Wendy Carver-Herbert, vice president of corporate communications. She reiterated what Bidpay's website says that security is a priority. "We have a sophisticated system in place to protect consumers' information."

She also says Bidpay is "working with law enforcement" to find out what went wrong, but so far they don't know if it was an internal problem or if someone hacked in.

Meantime, Bidpay may lose customers over this.

Braverman says, "I'd definitely have to think twice before I put my personal information out there on the Internet for anybody to grab."

Bidpay confirms Robbyn isn't the only one to receive customers' information.It actually went out to what a spokesperson calls "a limited number" of people. She won't say how many and we don't know if they're as honest as Robbyn.

Bidpay referred Channel 11 to MasterCard and Visa to find out how this is being handled. MasterCard says it's notified all of the banking institutions involved to put a fraud alert on the accounts and reissue credit cards if necessary.