Mark Warner actually said...

I think we have to ask honest questions. Who owns this data? How do you get the right to this data?

The complete, sloppy, haphazard approach you took on remediation is again inexcusable.

The fact that there was known vulnerability, that you did not have appropriate internal controls in place to easily patch this is inexcusabl...

Why was your site so technically flawed? Why did you send people to a new domain site that was not properly registered?