Hacker News Reader

This is a pretty crazy incident. How does something like this even happen on the technical side?

My guess is caching issue

Or someone forgot the "where user_id = ?" part of a query and it somehow got to production.