In 2021, misconfigured default permissions on Microsoft Power Apps led to the exposure of sensitive data belonging to 38 million users.
The exposed data included personal information such as names, email addresses, and phone numbers, which could be exploited for malicious purposes. This incident reminds us that even widely used and trusted platforms can pose significant risks if not correctly configured, emphasizing the importance of robust security practices and continuous monitoring.