This is the actual egregious thing in the breach. All of the support tool stuff seems like it was acting as designed and prevented the breach for sprawling.

The idea that at a security focused company they are passing around secrets via public slack channels is wild. That’s the thing they need to address.