The Access Was Real. The Authorization Wasn’t.
An access authorization gap — not a stolen credential, not a bypassed firewall — is what let two seconded employees look up the Australian Prime Minister’s personal banking records. Two staff seconded from EY to Commonwealth Bank of Australia used live, correctly in-scope secondment access to look up Anthony Albanese’s personal banking details. The access…