It’s even worse. They had zero monitoring and even after a hack they still had zero monitoring. Honestly, people should go to jail for this.
My friend went to jail for reporting a vulnerability he found on his college network because it was illegal to poke around the network in the first place.
These guys commit a crime to boost an IPO and most people are just thinking about how impressive it is.