Globbing did not ensure the security of customers' personal data: cyber attack or a leak?