I'd wager it's related to identity and access management. If everything is tied in to a single IDP, like Okta for example, and then cycled secrets incorrectly

I'd wager it's related to identity and access management. If everything is tied in to a single IDP, like Okta for example, and then cycled secrets incorrectly they could have locked everyone out.