Comment by CiaranR

Their websites were briefly directing to this site. Looks like a weak password exposed them.

Private keys and passwords here - [redacted]