The Starbucks Data Exposure: A Lesson in Broken Access Control

A real-world case study on how weak access control and excessive permissions led to internal data exposure at Starbucks. Learn how simple governance and security controls could have prevented this breach.

Why this case study matters

Use this scenario to understand how SOC, GRC, and VAPT concepts apply in real organizational security work.