Right, with the exception of Masem, everyone agree's it should be mentioned. The sentence should not include technical info. My draft - On December 2015, Steam's content delivery network was misconfigured in response to a DDoS attack, causing 34,000 users' personal information to be exposed.