GoKawiilBlackstone's Beam Living app leaked SSN digits and personal data via API bug
A security researcher applying for a lease on Beam Living, a Blackstone-owned property management platform, discovered that its GraphQL API returned sensitive applicant data including partial Social Security numbers, dates of birth, credit scores, addresses and emergency contact details. The information was exposed through a network call that could be inspected by anyone with basic developer tools while submitting a rental application.