And then they had an unrelated data breach due to their other shotty privacy/security practices