[paxys]

> How were they storing the keys in such a way that they were accessible from the internet

It's almost always either phishing or insider help.