Comment by ls612

It doesn’t even sound like it hacked anyone it sounds like there was a “s3 bucket set to public” type issue and the agent just naively downloaded the data. That should absolutely not incur liability, how is a reasonable person or agent supposed to know if a dataset you can download from a website designed to serve datasets is intended to be downloaded?