It's so sad that legally you can't even say this was an intrusion. All data was already public. Probably vibe coded by the ceo who has no technical competence in whatever he vibe coded.