900 Sites, 125 million accounts, 1 vulnerability - env.fail