← Back to Feed
Vatican's Official Prayer App Leaks 700K+ Global Users' PII
July 24, 2026 · Dark Reading · Severity: MEDIUM
This article details a data leak from the Vatican's official prayer app, which exposed over 700,000 users' personally identifiable information. A poorly secured API endpoint allowed anyone with a browser to access names, email addresses, and countries of users. The vulnerability required no authentication, making the data easily accessible.
Key Takeaways
- Vatican's official prayer app leaked over 700,000 users' personal data.
- A porous API endpoint exposed names, email addresses, and locations.
- The data was accessible to anyone with a browser, no authentication required.