[1B05H1N]

How did they not notice 7 million accounts being accessed through credential stuffing?

Do they have 0 fraud prevention? I doubt the attackers cycled IPs.