Yep. I find this story hard to believe. Finding credentials on Slack for the most important resources at the company seems too hard to believe. Also if this was the case, how come Twitter was having a hard time to figure out how to stop the hack?
I've worked with a lot of organisations, including tech orgs. It's very believable.
IM'ing passwords/secrets is totally believable.
Have you worked for a high profile tech company? This isn’t unheard of at all.
Yes, but still: individually I've seen all these things at various companies over the years. To find them all in one place is hard to believe but it just might happen.