[jturolla]

Possibly no because the token is app-specific and it's not likely that the slack key was compromised, but I also agree that they should have disclosed that.