All my previous comments on this specific story have been that this isn’t verified.
Lots of major news sites pulled the trigger on the headline for nothing more than clicks.
Some journalists say that Australian Home Affairs confirmed the breach… lol! They acknowledged the rumour, but that got spun as “verification”.
Then again, maybe it’s lack of decent cybersecurity writers.
I personally can’t stand this weaksauce writing with no fact checking and the nonchalant way of throwing companies under the bus.