Hacker News Reader

Right, but their claim is that there were proper separations that successfully did limit the blast radius.

Or at the very least, audit logs so they can see what that support engineer's account did during the period that the account was compromised.