Comment by zoklet-enjoyer

They didn't have a system set up to protect against that. Their private keys were on a shared email account