2024 Gerdes — 14K inmates, 20 prisons, call data exposed
Data compromised
Call logs, recordings, relationships
Technical writeup
Prison phone system (Prison Control Center) had no password. Lilith Wittmann accessed: phone numbers, call duration, recordings, relationships (lawyer, therapist). 20 prisons/forensic clinics. Legally privileged calls exposed.
Root cause
No authentication; unprotected API