Not from the US but https://www.cbc.ca/news/canada/nova-scotia/freedom-of-inform...
This news segment goes into more detail about how he downloaded the documents (by incrementing the document id in the url) https://x.com/Brett_CBC/status/984751373525901313
Wow, just wow. How about charging the website builders for negligence, for failing to protect sensitive data? Simply incredible.