Millions of people's data stolen because web devs forget to check access perms

This is one of those misleading headlines. A bug is a bug.