The cybersecurity firm UpGuard found that a default setting in a product used to build apps and websites left troves of personal information easily accessible.

The commonwealth said it will discontinue its relationship with Insight Global after employees shared information using an "unauthorized collaboration channel."