The reason we think that user data wasn't the target is based on looking at the attacker's trail, which appears more focused on seeking additional credentials r

The reason we think that user data wasn't the target is based on looking at the attacker's trail, which appears more focused on seeking additional credentials rather than exfiltrating user data. https://matrix.org/blog/2019/04/11/security-incident/ https://matrix.org/blog/2019/04/11/security-incident/ is a recap of the situation. In other news, https://news.ycombinator.com/user?id=matrixdotorg https://news.ycombinator.com/user?id=matrixdotorg isn't an official account for matrix.org, nor are they likely associated with the project.