Vatican Prayer App Leaked Personal Data of Nearly 720,000 Users
The official prayer app of the Pope, Click to Pray, has exposed the personal information of its 719,517 registered users. Names, email addresses, and dates of birth were made accessible to anyone who requested them. The vulnerability was first identified by a researcher known as BobDaHacker in early January. It took the Vatican six months to address and fix the security flaw. This incident highlights significant delays in responding to data security threats within the organization. The app's official status and the prolonged period before the issue was resolved raise concerns about data protection practices.
This incident highlights a critical gap between digital outreach efforts and robust cybersecurity infrastructure within religious organizations. The six-month delay in patching a vulnerability affecting nearly three-quarters of a million users suggests potential systemic issues in data governance and incident response protocols. In an era where data privacy is paramount, such prolonged exposure risks eroding user trust and could have significant reputational and legal ramifications. Future strategies should prioritize proactive security audits and rapid remediation frameworks to align with evolving digital threats and user expectations for data protection.
AI-generated to prompt reflection — not editorial opinion, not advice, not a statement of fact. How this works.