They must have outsourced their security to MSRC