Certainly there was no evidence; they likely have no logging anyway!

since they pasted customer creds in jira tickets they most likely are very liable hence the downplaying

im not an expert but if I was an investor I'd try to find a buyer for my shares and run