Southern Water customers could view others’ personal data by tweaking URL parameters
“The vulnerability allowed any logged in customer to view bills and documents from other customers.”
https://www.theregister.com/2020/08/28/southern_water_sharepoint_shenanigans/