> "Irregular gained unauthorized access, altered records and published credential-stealing packages using the unsecured models they were given access to."

Huh?? Is this referring to the incident itself or is this something they did intentionally? Confusingly worded.