[janpio]

So what did Nexi really want, and how did it get mangled so badly that it came out as "specifically the usernames and passwords of our supporters"?

[rcxdude]

It's entirely possible that is actually what they wanted (at least what the people in the company they were talking to wanted). I suspect that "we understood to mean" is language carefully designed to avoid a lawsuit.