It may have been, but security impact is often not recognized right away. The older report was not sent to [email protected] and did not include a root cause analysis.