Did Avon cyberattackers exploit an unprotected web server? – https://bit.ly/2Duj0Ex