Considering how crazy this story is about how Oklahoma’s Department of Corrections leaked thousands of Social Security Numbers, I had to comment on it.
Basically the developers of the Department of Corrections put an SQL statement in a url, which allowed anyone to pick and choose what data was displayed on sex offenders. This included SSNs and email addresses.
Remember kids, always sanitize your input and don’t be stupid and make your SQL queries public.