did they fail to protect the endpoints? not much detail here