They don’t know who their board members are? They don’t know what their email addresses are? I’m sorry, who doesn’t double check this stuff before sending out sensitive information?