Yup. That's what they say. Among other things, Shodan was showing their public facing server as vulnerable to a known exploit several weeks before the attack.

Yup. That's what they say. Among other things, Shodan was showing their public facing server as vulnerable to a known exploit several weeks before the attack. The same individual is being interviewed across multiple newspapers and constantly repeats it was a state-led attack without providing any technical details about what happened. We have been searching for three weeks and I think a friend finally found someone whose parent's data may have been in the database. If it is confirmed, we only need to convince her to get one of her parents to file a lawsuit. There are several lawyers here who will do it pro-bono. This could be the only way to finally get the truth behind this intrusion.