Unlike some academic studies which deal only with publicly available information, Pragma used a privatedataset from its customers, who represent about two percent of total market volume on a daily basis, which showed who was placing the orders.
By default, S3 accounts are set to private, which means these stores of potentially sensitive data had to be flipped to public manually -- most likely by accident.