Another example why shitty software can easily become a compliance or security problem.