The cybersecurity firm UpGuard found that a default setting in a product used to build apps and websites left troves of personal information easily accessible.

UpGuard, a security firm that researches software vulnerabilities, said it discovered a data leak and wanted to help state officials fix it.

An Oklahoma Securities Commission server containing decades of sensitive information sat unprotected, researchers discovered.