This reminds me of when some government org leaked social security numbers in client-rendered html comments (or something similar) and people who discovered this were called hackers for using browser dev tools
https://krebsonsecurity.com/2022/02/report-missouri-governor...
Luckily someone eventually talked sense into the governor, despite him ignoring the FBI originally when they told him it wasn't a hack