Or it could be completely innocent like they asked for a list of all adafruit designs, and flux.ai sent back a list of all designs including some private ones, because their filtering is broken.

Or in your pocket analogy , flux dropped their wallet on the ground and walked away, adafruit picked it up and yelled "hey bro you dropped this"