Ally was carrying an SQL injection flaw that allowed data exfiltration.