Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files