A researcher’s trawl through publicly available code found private information was at risk across multiple departments.