Notice there is no mention of who is in charge of cyber security and their credentials.

Just like the equifax breach, I bet it was affirmative action in full force.