suspect the author is referring to https://matrix.org/blog/2019/04/11/we-have-discovered-and-ad... and also missed the point that the breach didn’t compromise any e2ee data, because of e2ee.