did the unpaid intern do that before or after the insecure database server accidentally got given a public ip address? did they also check and update that old

did the unpaid intern do that before or after the insecure database server accidentally got given a public ip address? did they also check and update that old office use only IIS server no one uses before the department all got public ips, or wasn't there a lunch budget for that.