It sounds like there was no "co-ordination" behind any of this co-ordinated disclosure. You'd have expected there to be an IRC channel, a mailing list, a Slack chat, or something for something of this scale.

Was there even an incident co-ordinator here? Was any of the parties talking to each other?