The part you emphasized is dependent on the first part of that sentence, however. In this hypothetical lawsuit Facebook&#x27;s lawyers would easily be able argue that they would not have done anything for the initial exploit or even demonstrating that he had recovered valid AWS keys but that attempting to hoover up data from S3, etc. violated the “good faith effort to avoid privacy violations” part.