They gave notice and waited until the offending pages were taken down. The article does not specify what the original html looked like, it could be a simple art

They gave notice and waited until the offending pages were taken down. The article does not specify what the original html looked like, it could be a simple artifact from testing, when someone dumped the entire object into a template for debugging or maybe they actually were using this as a sort of a data field and then used it, for example, in a js call call to served. But the response from the AG shows they have no idea how internet works: “They had no authorization to convert or decode, so this was clearly a hack.” Bigger questions: Who developed the system? Was it a contractor or in-house? If it was a contractor, are they gonna lose government contracts? Because, it sounds like they should. If it was in-house, are they gonna get training or some procedure in place to audit things going forward?