First, the complainant needs to take ownership of poor secrets generation and management. Their account wouldn't have been hacked if they used strong password p

First, the complainant needs to take ownership of poor secrets generation and management. Their account wouldn't have been hacked if they used strong password policies. There is also the remote possibility they're playing the victim to get out of charges after they realized it wasn't economical to mine on AWS.