So much is missing from this story. Did they report it to the relevant data authority? Did the fix they said they applied actually fix anything? Etc.