Interesting timeline, but nothing here proves, or even strongly indicates, that Counbase “knew about the breach” from this one report.

Screenscraping malware is fairly common, and it’s not unreasonable for an analyst to look at a report like this and assume that the customer got popped instead of them.

Customers get popped all the time, and have a tendency to blame the proximate corporation…

That's true, but in this case I got a response from the head of trust and safety after I sent the phone recording, email + email headers, saying "This report is super robust and gives us a lot to look into. We are investigating this scammer now."