customers’ data exposed