He told the BBC there was no evidence yet that the data had been used maliciously.
Huh?
https://webcache.googleusercontent.com/search?q=cache:VlVylT...
That request is scrubbed now, but it contained an Uber driver's lat-long coordinates. I used it to look up where they were driving.
CloudFlare really aren't helping themselves with these statements. The people who decide whether to use CloudFlare are programmers, are programmers generally can't be duped with statistics like "1 in 3.3M requests were leaking data" (translation: 100k requests per day were leaking data[1]) or "There's no evidence anyone used this data maliciously" (translation: we have no idea what is being exploited).
[1] https://news.ycombinator.com/item?id=13719518 and https://news.ycombinator.com/item?id=13722606