If Cloudflare accidentally leaked additional sensitive data to Tavis during the handling of this incident, and that data wasn't already compromised by the parser bug, then you should call that out in the incident report.

Understandably, I think. I can't imagine you've had much sleep this week.

Little

I'm sorry you (or anybody else) have to go through this.

Thanks.

FWIW, I admire you for how you're handling this, taking the grunt of the storm all by yourself and not throwing anyone under the bus. Tip of the hat to you and may better times lie ahead!

No one else's mistake other than ours.

This and the SHA1-pocalypse cannot have been a fun day.

Maybe time to consider one of the nap rooms?