Based on the article, the youtuber and an accomplice who knew an Apple employee accessed the employee’s phone while it was unattended, so technically it wasn’t intentional and more negligence. On the other hand, Apple also claims the employee failed to report previous breaches, so maybe this was the final straw.