“Highlights a prolonged security failure exposing millions of records, emphasizing institutional negligence and significant privacy risks.”