As a result, the company acknowledged in August 2019 that some Imperva WAF users had their email addresses, hashed passwords, API keys and SSL certificates exposed. The company’s recommendations ...