Hardly a good advert. I would have thought a pen testing firm would make client confidentiality an extremely high priority.

My guess is a Palantir employee who feels that due to the volume and nature of the data they handle that it needs to publicly known their security isn't up to scratch.

Meanwhile, if it came out that they leaked a pen test report, it would literally destroy their company. All their current clients would ditch them, they'd get sued into oblivion, and no one would trust the senior people there in the industry ever again. Would be a very dumb suicidal publicity stunt.

Not a chance. Maybe an employee of that company did it who doesn't like Palantir but the company doing the pentests doing this on purpose is not on the table.

The upside does not begin to counter the downside (such as not having a company any more).

But you can bet they're digging very fanatically right now to figure out where the leak is.