1. A security flaw in juror management websites across the US and Canada, operated by Tyler Technologies, exposed sensitive personal information such as names, addresses, and phone numbers of potential jurors.
2. The vulnerability allowed anyone to access this data through brute-forcing unique numerical identifiers assigned to jurors, as the platform lacked rate-limiting measures.
3. Tyler Technologies acknowledged the issue and is taking steps to fix it, but has not responded to questions about potential malicious access or notification of affected individuals. This is not the first time Tyler has left sensitive data exposed online.