[hertzrat]

Out of curiosity, why is it only 5M and not 500M? You would think the same vulnerability applied to every server, not just one or one cluster, if they are using automated deployments

[uncletammy]

Could be a time intensive exploit. Maybe they didn't have enough time to mine the other 455M.

[alex_young]

The rest are bot accounts right?

[LegitShady]

Doing it slowly over time to not raise an alarm and collect the information, rather than twitter noticing a massive upticks in password resets that don’t go through?