Yours works

The mistake

A field meant only for an internal example/preview value in a design tool is filled in with real personal data and then shipped straight to production with no environment separation or review gate between 'placeholder shown to designers' and 'content rendered on live pages.' The same unvalidated value also gets pulled into an already-triggered transactional email template and sent to 11,000 recipients before anyone reviews it, and because those emails are already delivered, there is no way to retract or redact the exposed number after the fact — only a follow-up correction can be sent.