Customer Data getting shared

Application Security
1

What is the name of the domain?

pilot2290tax.com

What is the issue you’re encountering

We have customer signup/login and data are displayed based on user. Since this morning we are having customer data being shared. No Changes on our application or server since June and been performing with any issues, it all started since this morning 11-18-2025

What steps have you taken to resolve the issue?

I have moved the copy of data to different server and tested, it works as designed. After i set the developer mode the data is not shared and all seems to be fine.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

If i turn the developer mode off it will show shared data.

2

Developer mode turns off after 3 hours automatically and the data stared to show between users. Since this is a serious issue and no community help i had to move the NS back to aws and since the issue has gone.
This issue started when CF when down on November 18 2025, some reason the caching seem to have shared session details users. This is a serious issue not just for us as it might happen for others also. Hope CF tries to understand the problem it had caused.

I maintain at least 10 domains through CF and i need to move back all to aws, which i will be doing slowly.