SAP software update mistakenly assigned higher-level privileges to some users in New Zealands firearms buy-back notification database. Names, addresses, phone numbers, firearms license numbers and bank account details were exposed. The database enables gun owners to notify police of firearms they own and register for compensation. SAP says it locked all user profiles on the system except for consultants who were investigating. New Zealand Police say the database will remain offline until the vendor says the platform is secure. Police disputed a claim by Council of Licensed Firearms Owner that 19 unauthorirized individuals had accessed data.”]
Source: https://www.govinfosecurity.com/sap-software-update-exposed-new-zealand-firearms-register-a-13464