> I don't think this is reasonably called hacking, it's more social engineering or scamming. The vector doesn't matter. The mark of sophistication is not that

> I don't think this is reasonably called hacking, it's more social engineering or scamming. The vector doesn't matter. The mark of sophistication is not that they use highly technical vectors, but that they know how to use their toolbox, and social engineering remains one of the most powerful tools in there. Data was still exfiltrated without consent. That's hacking.