They exposed the intranet RMA portal used by MSI customer reps to review RMA claims, customer communications and all the personal info of the customers. The portal has a nifty button to dump the whole database to a CSV file going back to 2017.