Hmmm. Let me see if I can write the firms reply.
"We take the privacy and security of our customers/users/data sources very seriously and are studying the information we have been provided. We expect a patch shortly."
Time will tell what, if anything they actually do.