Researchers exploited vulnerabilities in Johnson & Johnson web applications, leading to the exposure of sensitive data. A flaw in the Campus Recruiting application exposed student information, while another in the Audit Tracking Management System revealed confidential internal audit data. These incidents highlight the importance of thorough security testing for web applications handling sensitive information.