3 ms·

From their response, as far as I understand it, Some line items 'comments' field had credit card details included in them, which they didn't bank on.