I don't think NCC is 2026 is anything like the NCC of yore. Some of the most incompetent assurance and security researchers I've ever met have come out of there more recently.
Hopefully this hack is a warning for anyone that might use NCC's services in the future.