[sp332]

That message doesn't say the attacker got access to your workspace or clicked around in it.

[pouta]

From above:

"Based on that ongoing assessment, we have concluded that the incident involved your workspace."