Yep. I find this story hard to believe. Finding credentials on Slack for the most important resources at the company seems too hard to believe. Also if this was the case, how come Twitter was having a hard time to figure out how to stop the hack?