The exposed cohort left between 2016 and 2018. The careers site was still holding them, and nobody had a reason to know.
A third-party software flaw reached email accounts across six Japanese providers. Choosing a different ISP bought no independence.