Dear O2,
This is pretty stupid of you. How did none of your internal devs spot this as a massive data breach? Perhaps some data security training is in order. Also, please fix this by the end of the day.
Love, Rob
Update 3pm GMT
Looks like this has now been fixed, the x-up-calling-line-id header no longer shows. Here’s hoping this is a permanent removal.