> It is understood the incident occurred when a cyber criminal targeted a call centre, based in Manila in the Philippines, and gained access to a third party customer servicing platform
You get what you pay for. Did they think paying ~$5 an hour to an offshore call centre was going to give them proper cybersecurity?