Google+ bug — 500k users' private data to developers (2015–2018)
Data compromised
Internal documents
Technical writeup
From 2015 to March 2018 third-party developers could access Google+ private data. Google fixed but did not disclose; internal memo feared spotlight. WSJ reported Oct 2018; Google announced Google+ shutdown.
Root cause
Google+ API bug; non-disclosure.