This assumes it was incompetence and not done intentionally. My understanding is neither company is owning this data set and there is an assumption that it is

This assumes it was incompetence and not done intentionally. My understanding is neither company is owning this data set and there is an assumption that it is a third company that has either legally or illegally obtained the data and is using it for their own services. Another option is that the data was exfiltrated by a loose group of people who wanted this to be freely available on a random ip. Know the ip, get sick access to a trove of PII. No logins, no accounts, no trace. Welcome to the early 90s internet.