Investigating IDOR vulnerabilities in a BSE-listed company

A publicly listed entity in India leaks its business invoice data at will. Deep-dive into the issue and how to stop such leakages.