"an automated data sanitization process failed, emails and salted hashed passwords were disclosed. no server was hacked."