I'm not sure I would call this "authorized in a sense" since social engineering, in order to gain access to an internal tool, was the method. Social engineerin

I'm not sure I would call this "authorized in a sense" since social engineering, in order to gain access to an internal tool, was the method. Social engineering most often involves impersonation, so the person getting access was not really the intended party.