Security is hard. On the upside, every breach is a chance to learn for everyone else. I hope they release more details on how it happened.

Is there any blog or news that summarizes such post-mortem lessons? Could be a nice project to collect that.