UK Government Sites Reveal Sensitive Data

One case involved the Planning Inspectorate accidentally publishing login credentials with full Microsoft Entra ID access, enabling read and write access to private employee data and legal records. The vulnerability was detected and fixed within 20 minutes. The issues stem from inadequate code management, not open-source publishing. Out of 349 public sector codebases reviewed, about two-thirds contained exploitable flaws, including in education and open data services.

Summarised from the original article by an open-source model, then checked automatically: every number and English name must appear in the source. The original article is authoritative.