HOW A CHARGE POINT OPERATOR ACCIDENTALLY LEAKED AUTHENTICATION INFORMATION OF ALL ITS POTENTIAL CUSTOMERS

Summary from the TLDR InfoSec newsletter

This article covers an anonymous responsible disclosure of an API issue to a charge point provider. Omitted per the operator's legal request, the problem was resolved promptly. The piece aims to help developers avoid excessive info disclosure through APIs while making necessary revelations safely.