This is interesting and kinda cute. But, I wouldn't call it a "showstopping breach"; esp. considering the web-site is specifically designed to report static data to the public. I presume a fix was applied.