In 2011, I blogged this: https://web.archive.org/web/20130501172236/http://www.fernando.com.ar/2011/afip-filtra-informacion-privada/ https://web.archive.org/web

In 2011, I blogged this: https://web.archive.org/web/20130501172236/http://www.fernando.com.ar/2011/afip-filtra-informacion-privada/ https://web.archive.org/web/20130501172236/http://www.fernan... I found the "leak" with a right click in my own data (images), then I changed the params in the URL without being logged in and it worked. Fingerprints, Scanned ID cards, Photos, and Signature, of millions of Argentine citizens. When I changed the ID in the URL, I used the ID (found in public sources) from a guy named like me. When I saw his face, ID card, fingerprint, and signature my jaw dropped. Years later AFIP took over the control on .ar TLDs (NIC.ar) and for strange reasons I could not renew my domain. :) Ten years ago. Its all leaked. Or at least we should asume so.