Microsoft Power Apps, a low-code application development platform, was recently discovered to have included an API design flaw that exposed over 38 million records, from entities including governing bodies and major corporations, that detailed sensitive customer data such as social security numbers and COVID-19 vaccination status.
