South Carolina capital website had a security flaw that exposed passwords - CNET

The credentials included passwords for Columbia's databases and email protocol servers. The flaw has been fixed.