[ufmace]

That probably is the better way to see it at this point. There's already enough bad actors out there that it's not really worth keeping track.

I'd be willing to bet that they have comprehensively sloppy and terrible infosec practices and that we'll never hear any details about it - most of their customers wouldn't understand, and it would only expose how bad they are at all of this if they did.