“The CTO never came back to you.”
The meetings collection in tl;dv’s Firestore had no tenant isolation, so any signed-up user could read all 181,874 records across 84,312 accounts. That includes conference IDs for calls actively recording, which means you could walk into someone else’s live meeting. The researcher disclosed it in January and got nothing. Six months later it was still open, and the company sells this as a meeting recorder for enterprises.