> a security breach Wasn't it a security vulnerability? IIRC they were returning data they shouldn't have for some calls, but didn't have conclusive evidence t

> a security breach Wasn't it a security vulnerability? IIRC they were returning data they shouldn't have for some calls, but didn't have conclusive evidence that anyone had ever made those calls because of log rotation policies. (Maybe I misremembered, or maybe you're talking about a different issue?)