On: First American Financial Corp. Leaked Hundreds of Millions of Insurance Records

[GordonS]

Sure, security is about taking a layered approach - I don't think anyone would seriously advocate using knowledge of a UUID as enough authorisation on it's own. Well, I hope not :)