Thank you for this detailed information, I'm surprised there're no comments in this topic.

What I'm really concerned with is how poorly the Verge team handled this situation, keeping in mind that this is the second severe breach, and in both cases we got almost zero details from their team.