Reporting here:
https://www.theregister.com/2020/10/..._noble_hacked/
I know hackers are clever, but actually ANY company getting hacked has been negligent. Either with staff passwords if internal, training if it's by social engineering (even a free mouse in the post to a senior person with malware, that's real) or poor internet facing security.
There is zero excuse.
Also past experience shows many companies are slow to admit the extent of hacks.
NEVER use the same password for more than one site. Write them in an address book never stored with computer. Only store non-financial passwords in your browser password manager.
Do not let Amazon, Google, Microsoft etc store WiFi or site passwords, other than the login you use with them.