Personal, financial, and health data belonging to millions has been stolen via insecure direct object references, say cybersecurity agencies in the US and Australia. They're urging developers to review their code and squish these bugs for good.
https://www.theregister.com/2023/07/29/cisa_nsa_idor_australia/