Top Highlights
- The Vatican’s "Click to Pray" app leaked over 700,000 user and staff personal data due to an API vulnerability.
- Exploiting the flaw requires no technical skill—attackers can access sensitive info with a simple browser page.
- Many users mitigated risks by using anonymized data or Apple’s "Hide My Email" feature during sign-up.
- The incident highlights that even organizations with data protection regulations need basic cybersecurity practices to prevent breaches.
Vatican’s Prayer App Faces Data Leak
Recently, a popular Vatican prayer app called “Click to Pray” experienced a serious security breach. The app, used worldwide by over 700,000 people, leaked personal information, including names and email addresses. The leak occurred because of a software flaw known as an IDOR vulnerability. This flaw allowed anyone with internet access to view user data without logging in. As a result, thousands of user profiles, including staff and administrators, were exposed publicly. The vulnerability was confirmed by independent security testers who tried to alert the app’s developers. Despite this, the security issue still exists. Such a breach highlights how even apps built for good causes can be vulnerable if security is overlooked.
Implications and How Users Can Protect Themselves
The leak poses serious risks. Hackers can use the exposed data to send scam emails or attempt social engineering attacks. For example, they might impersonate the Pope’s prayer network to trick users into revealing more information. However, some users protected themselves by providing fake or abbreviated names when signing up. Many also used Apple’s “Hide My Email” feature, which masks real email addresses. This shows that even if an app has security flaws, users can reduce risk by being cautious about the information they share. The Vatican has a data protection law, but this incident shows that more work is needed. Organizations with large databases should prioritize basic security practices to safeguard personal data and maintain trust.
Discover More Technology Insights
Stay informed on the revolutionary breakthroughs in Quantum Computing research.
Explore past and present digital transformations on the Internet Archive.
CyberRisk-V1
