The security flaw was discovered on Friday 13 March. Services were suspended and restored on 16 March, but companies are advised to check their records.