It is, though, at least extrapolated from some real things, like non-trivial analysis of badge scans, fairly deep tracking of Citrix, Teams, O365 activity, and

It is, though, at least extrapolated from some real things, like non-trivial analysis of badge scans, fairly deep tracking of Citrix, Teams, O365 activity, and so on. Probably embellished to drive more interest, outrage, press coverage, and so on. Some attempt at a bit of bad PR revenge in exchange for being monitored in this way.