Comment by steffanA

Article says API token was stolen in original breach.