A confirmed small intrusion and a possible large one, three days apart. The larger number is the one that will circulate.
1.4 million addresses, and instructor payout methods. A card can be reissued; a bank account configured to receive money cannot.
Hundreds of organisations claimed through public portals working exactly as configured. The guest user profile is a permission set nobody designed.