British online betting site Betfair has plugged up holes that left user data exposed. Customers discovered the vulnerability when trying to reset their profiles and realized that in doing so, their account name and date of birth were unprotected. After much criticism of its email policy on Reddit and Twitter, the company is requiring email authentication and at least one security question for all profiles.