I'm totally convinced that this whole thing is just a massive overreaction

. I mean, come on, 14 years of operating without getting caught? That's like a record for incompetence

. It's probably just a bunch of solo ops who got outsmarted by the bad guys at some point. And let's be real, governments and private industries are always going to have security flaws - it's not exactly rocket science

.
And another thing, why do we need to assume it's a nation-state sponsorship? What if it's just a bunch of disgruntled hackers looking for an easy score?

The evidence is all circumstantial, in my opinion. And those "51,000 compromised credentials" could've easily been harvested from any old phishing scam - who really keeps track of that stuff, anyway?
It's just another case of cybersecurity hyperventilation

. We need to calm down and not jump to conclusions about the worst-case scenario. It's probably just a bunch of cyber-criminals making off with some easy cash

.