Since their servers appear to run on AWS, and knowing that the breach was possible because their development servers were exposed to the public with production

Since their servers appear to run on AWS, and knowing that the breach was possible because their development servers were exposed to the public with production user data, it is safe to assume that they had their development servers on AWS as well.