According to their latest Tweet, it does not seem like an inside job after they did their investigation. But it is unclear if the lack of evidence is the result of no inside job or simply a good job from the cracker to clean their history. Not really a good look at their image after they told their users that they got phished.
I still doubt its the case, no company will admit that it's one of them, it's mentioned in the article that a third party disclosed/leak the APIs, so what's the third party to be exact? They are now redirecting blames to others instead of being sorry and claim the responsibility and refund their users. Well, its the same ceo who immediately blamed their users for being phished and hacked after reporting the case to them.
I'll give them that they might not be able to say due to legal issues. Even big places like Gemini did not say who leaked some data from their mailing lists just that it was leaked.
Massive liability issue. If *I know* that I did not leak it but, the only other person who had access was you still saying you did it is dangerous because if it was NOT leaked by you but rather by an undetected hack, or outright theft or..... There could actually be more backlash if they say "A" did it and they were wrong then just saying 'someone else'
I still don't believe it, but I can see the logic behind it.
-Dave
