> Can't they just wipe them clean and restart They’re now evidence in an ongoing investigation. They don’t know exactly what happened to them because the perpe

> Can't they just wipe them clean and restart They’re now evidence in an ongoing investigation. They don’t know exactly what happened to them because the perpetrators deliberately disabled the security cameras monitoring the machines before doing whatever they did. Wiping them could destroy evidence or it could miss a different issue (hardware modification, for example). The only reasonable response is to quarantine the machines as evidence and replace them with new machines with a known chain of custody. > How is one person being present during an upgrade enough to render the physical machines suspect and beyond repair/review? There’s more to the story, including someone intentionally disabling the security cameras that monitored the machines for at least a week. With a gap in the surveillance of the machines combined with a QAnon-associated leak and an intruder who misled the office, it’s time to start fresh and set the old machines aside as evidence.