Not any public sources, but I've personally seen a copy of the database and know that PIA was using a ridiculously vulnerable version of Kayako Fusion at the time.