Fertility tracker Glow fixes bug that exposed users’ personal data

A security researcher discovered an IDOR vulnerability in Glow's developer API that allowed public access to personal data for approximately 25 million users, including names, self-reported age groups, location, internal user IDs, and user-uploaded images. The researcher reported the issue in October and Glow fixed the leak about a week later; the article notes prior privacy problems and a 2020 settlement related to Glow's handling of user health data.