iirc they weren’t even the first ones to discover this because there was already someone on the blackmarket selling data collected from exposed cameras and endpoints which included PII of entire police departments.