zlacker

Because ot was not network breach (i.e. get dump from some db), but abuse of feature available in the web app (so they had good logs to see who was affected).