Portal hacking vulnerability claims