Seems that the sales department found a bug in a thing I created for them that could be triggered if you sent a malformed URL that contained certain unicode characters. Nothing would be compromised, but the site would show things like [BASE_PRICE] and [DISCOUNT_OFFER] instead of the actual base or discount pricing values. Reason was the malformed URL was overwriting the client ID with a buffer overflow. The web server handled the situation by saying "Well this data is just plain wrong" and returning false instead of a default set of pricing.

Rolled a fix out within five minutes and things are good to go again. Now comes the question of WTF the sales people were doing with malformed URLs … ಠ_ಠ