Comment by SkyPuncher

How they moved laterally was likely trivial. Every place that I seen with a VPN tends to trust everything within the VPN.