> that they were exposed for “several months.”
I wonder what library was used, and which other companies use it which hasn't told their users. That'd let us know who isn't as transparent...