Exposed! How a Simple Web Misconfiguration Left Critical Data Wide Open to Hackers

### Executive Summary BeVigil discovered enabled directory listings on a high-profile asset that exposed sensitive artifacts — including authentication tokens, PII, admin and backend database logs, and backups — across multiple URLs that were refreshed daily; the report describes detection via attack surface monitoring and recommends disabling directory listings, strengthening monitoring, and performing regular security audits.