'The company has a 24-hour timeframe to reach out to us using the provided instructions. If no action is taken within this period, there is a risk that all data will be made publicly available.'