You're right. The urls were public to be shared (think of marketing material / ecommerce), so there was not a security incident. But it did give our competitor

You're right. The urls were public to be shared (think of marketing material / ecommerce), so there was not a security incident. But it did give our competitor free highly qualified leads that they could use to poach customers. This product was new to our customers, and we had spent a lot of time selling and convincing them that it was useful.