Cannabis club software exposed a million passport records

A Finnish maker's cannabis club management system left customer data—including scanned passports—publicly accessible online. The breach highlights how even niche, bootstrapped SaaS products handling sensitive information need basic security practices; there's no exception for indie scale.