After I read some info on their website, I suspect the company sells security software to companies to investigate their own google drive usage. I guess they are reporting accumulated meta information their customers shared.

How were they able to analyze 6.5 million files if 0.5% were publicly available? How did they get access to the 99.5% other files?