[taxman22]

The postmortem doesn’t say that. It just says they were caching “user information”. Maybe that includes a Stripe customer or subscription ID that they look up before sending an email, for example.

[tmpz22]

Yeah probably the session id and when the wrong session id is returned other operations like GET User details would pull its data from relational storage.

[doodlesdev]

Yes they were. It says they stored billing address and some pieces of credit card data.