It makes me wonder how they set up their security infrastructure. Were the hackers able to freely access their HSMs? Do they not monitor access? Would be nice

It makes me wonder how they set up their security infrastructure. Were the hackers able to freely access their HSMs? Do they not monitor access? Would be nice if some form of RCA is made public.