It was journalists, not hackers, who discovered vulnerabilities in the Missouri Department of Education’s website. There was sensitive information hidden in code, but publicly available.

source