> At this point, we have well-developed evidence that the perpetrator is an individual with intricate knowledge of our cloud infrastructure.

That's quite interesting. You can imagine a disgruntled, former employee that didn't lose Lastpass or AWS access... or someone else very close to the company?