http://tweedge32j4ib2hrj57l676twj2rwedkkkbr57xcz5z73vpkolws6vid.onion/2021/disclosing-wsdot-sqli
This included full name, email, and hashed passwords (SHA256 with a 256-bit salt, hashcat mode 1440: sha256($salt.utf16le($pass)) ). Most concerningly to me, there are 4,659 records with four digits in a column titled social_security_num . While I have no way to validate this, it seems to be the last four digits of SSNs.