I have a doubt about a finding, because there is some tax numbers in the code . So that qualifies as a business leakage?. How much private is a tax number ?.
Also the thing that they did with these info is like mocks and migrations.
Does that qualify as private data ?
by the way thanks for your help