News reported it was data getting passed around as a spreadsheet attached to emails. Ironically it would have been possible to build a case management tool with rbac on Palantir Foundry and avoid that screwup.