How Armenia Exposed Its Voters for 20 Years
Armenia's Central Election Commission exposed voter personal data -- names, addresses, birth dates, phone numbers, and passport numbers -- through at least 6 different public web systems from 2003 to 2025. An unauthenticated SOAP API let anyone query voter records by address. OWL recovered the evidence from the Wayback Machine.
https://owlorg.com/en/investigations/elections-voter-data-breach/