A targeted database logic vulnerability within the Office of the Migration Agents Registration Authority (OMARA) portal exposed the confidential legal, application, and registration documentation of six registered Australian migration agents to unauthorized users.