As I understand it, in your report of findings you made several recommendations that CRA has agreed to implement. Was CRA using best practices at the time to prevent these sorts of privacy breaches?
On December 5th, 2024. See this statement in context.