Mark Warner actually said...

"The fact that there was known vulnerability, that you did not have appropriate internal controls in place to easily patch this is inexcusable."

"I think we have to ask honest questions. Who owns this data? How do you get the right to this data?"

"Why was your site so technically flawed? Why did you send people to a new domain site that was not properly registered?"

"The complete, sloppy, haphazard approach you took on remediation is again inexcusable."