Attack path
Exploitation of a web-application vulnerability to reach internal files.
Confirmed impact
Personal data belonging to millions of consumers was exposed, including identifiers and sensitive financial records.
Response
Public disclosure, investigations and a broad response program for consumers and regulators.