The resumes were not meant to be public. That's the data breach. How it happened is a mere detail. In this case it's directory browsing because of web server mi

The resumes were not meant to be public. That's the data breach. How it happened is a mere detail. In this case it's directory browsing because of web server misconfiguration, a top 10 OWASP no-no. https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration https://owasp.org/www-project-top-ten/2017/A6_2017-Security_... Check Scenario #2