But: I imagine since I had valid login credentials, and they were likely cached in a cookie, well, seems like they harvested cookies and went hog wild?
Tbh, its things like this that Have prompted me to leave the industry entirely. My personal take is that there are very few ethical people in C-level positions, and hence most companies are entirely unethical. YMMV