Hacker News Reader

So I guess if you authorize the entire world to read the data, it’s not a breach.

If nobody reads the data it is not a breach.

So the junior engineer who couldn't secure an endpoint implemented thorough request logging and auditing? Impressive.