August this year, misconfigured power apps from Microsoft led more than a thousand web apps to mistakenly expose 38 million records on the open internet, including data from a number of COVID-19 contact tracing platforms, vaccination sign-ups, job application portals, and employee databases. Many people’s phone numbers and COVID-19 vaccination status were visible due to the leak. The report further confirms that despite the heavy use of these technologies, there was limited impact or effectiveness in curbing the spread of the virus.