This is a deeply concerning issue to have happen, but I do want to commend GlobalSign for their detailed response in the ticket. It looks like there's other issues they have not yet addressed per the last comment from Ryan Sleevi, but their response so far is very helpful in understanding what occurred.