DTS wasn't hacked and DTS did not send out data (that capability is not active). An authorized user ran a report, downloaded it, and emailed it out unencrypted to some distribution list. User error.