The MAPP program has somewhere around a hundred vendors. The expectation that a hundred different vendors, with all of their employees that have access to the information, may not have a leak (especially when such a leak is potentially lucrative) is beyond any reasonable expectation. Microsoft has some hard decisions ahead as to whether to continue the program as it exists today (do they do nothing, or do they share less, or do they require all the vendors employees that have access to the information to have additional vetting, or do they start providing different information to different organizations, or ????).