It wasn’t literally that, it was that the dashboard contained both data intended to be public and data not intended to be public, all accessible by anyone on the internet.