That will be part of what we assess in the investigation in terms of seeing what happened when, and whether the recommendations that we made in our GCKey report mattered. When were they implemented, and did these things occur before or after, for instance, the multifactor authentication and the improvements in terms of the process and verification? That will certainly be part of our conclusions in this upcoming investigation.
On December 5th, 2024. See this statement in context.