To fix a hole in the Open Cart

The task is to find the error !

The mail came a letter from person XXX where he made a screen of my database and dumped all the customers orders with all the contacts from my website which is on Open Cart

OpenCart © 2009-2020 All rights reserved.

Modify By Amass Development!
Version 2.1.0.2 (trs-2.1.0.0)

Estesno asks for money and says that will tell you what to do !

Whos ready to buckle down and find a bug, the cost will of course discuss ? Thank you