Nimbus HR portal. Your own record is boring. There is a public activity feed that is supposed to show only display names - but check what it actually returns for each entry. Then ask the pivot question: what does that value let me open elsewhere?
/naked/leak-to-idor/record?ref=<object ref>. Your own ref is obj_10000000aa (try it - it is your own, so it is not the exercise).