Stanford University School of Medicine

In order to examine other students' high school records and Common Applications, Stanford students had to first request to see their own admission records.

Available documents included private information, such as Social Security numbers for some pupils.

Students' race, legacy status, address, citizenship status, criminal status, test scores, personal writings, and whether they sought financial aid were also available as information.

Students' documents might be accessed by modifying a numeric ID in a URL rather than by searching for them by name.

Source: https://www.databreaches.net/changing-numeric-id-in-url-allowed-students-to-view-other-stanford-students-admission-files-sensitive-personal-data/

"id": "STA15918223",
"linkid": "stanford-university-school-of-medicine",
"type": "Breach",
"date": "02/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"