2026 NC AOC — jury-excuse upload IDOR; SSNs, DLs, medical docs publicly enumerable

Verified WBTV investigation (David Hodges) with NCAOC response — September 23–24, 2026. Jurors uploading supporting documents via the NC Judicial Branch online jury excuse/deferral form received confirmation emails containing document URLs. Changing a single digit in the URL enumerated other filers’ uploads. WBTV reported dozens of driver’s licenses, SSNs, medical records, job details, and a rape incident report with a victim’s name. Discoverer Zach Duda says he reported via the courts webmaster/bug form without response before press outreach. Within days of WBTV contact, NCAOC restricted unauthorized access to jury-excuse documentation; spokesperson said the webform and repository are secure after the restriction. NCAOC (overseen by Chief Justice Paul Newby / Director Ryan Boyce) declined interviews on dwell time and census and did not answer whether the event is a notifiable security breach under state law. recordsAffected 0; companyConfirmed true for the exposure and access restriction.