I can't seem to find the article now but wasn't there a story a while back about someone who was able to access other people's bank accounts by just incrementin

I can't seem to find the article now but wasn't there a story a while back about someone who was able to access other people's bank accounts by just incrementing the User IDs in the URL?