Blackstone-owned Beam Living exposed tenants' Social Security digits, dates of birth and addresses

Beam Living, a real estate company owned by Blackstone, exposed sensitive personal data of tenants — including Social Security number digits, dates of birth and addresses — through a GraphQL API vulnerability. The flaw allowed unauthorised access to the database. Security researcher Alex Schapiro discovered and disclosed the issue on his blog.