[iandev]

It’s possible to have zero tolerance and not fire anyone here. My understanding is that no employee misused their credentials or tools. The attackers misused them. I suppose you could argue that accidentally exposing credentials is misusing them, but I don’t think that’s what Twitter means there.

[kerng]

Maybe attackers/phishers are the same people who's accounts were used? Easy bypass.