A misconfiguration in a company Web server exposed countless customer account numbers, balances and other sensitive data. Much of the information had been indexed by search engines, including a page listing administrative credentials that attackers could use to access data that wasnt already accessible via a simple Web search. MBIA Inc., based in Purchase, N.Y., is a public holding company that offers municipal bond insurance and investment management products. The data was exposed thanks to a poorly configured Oracle Reports database server.”]
Source: https://krebsonsecurity.com/2014/10/huge-data-leak-at-largest-u-s-bond-insurer/