Interesting how there’s not been much actual security reform or hardening of these systems and processes. My guess is that they were just penetration testing. Investigating all the ways fraud could occur but hasn’t been exploited, yet. But now they know the ins and outs, they can leave the vulnerabilities they want to exploit, in place.