It is hard for me to fathom that this was an ongoing hack for two years and nobody there noticed it.

We will likely never hear the entire truth.