. . . . "In 2012, a system upgrade left names, Social Security numbers, dates of birth, and other information exposed on the Internet for two months;" . .