The opposite… Its Personal Identifiable Information and the fines are huge under GDPR in Europe.
Very prevalent to the point that’s is in the OWASP API Top 10. This type of issue is present in almost any data breach associated with an API security issue, and pretty much all the API security reports that you see released every year mention it as one of the main findings in the APIs that were part of that report case study.
