MediumData breachResolved· updated Nov 6
Central Election Commission Candidate Asset Declaration Website Returns National ID Numbers of 1,573 Candidates; ACS Assists with Security Testing
Query responses from the Central Election Commission (CEC) candidate asset declaration website included non-public National ID numbers of candidates that could be retrieved via browser developer tools; after a civic developer discovered and reported the issue on October 27, the CEC suspended the service that same day to fix the bug and stated on October 28 that preliminary findings pointed to an outsourced vendor error .