We now know that a bunch of the initial HF reporting was off:
1) Open-weight models helped with forensics & cleanup, but did not stop the attack
2) There were multiple waves of incidents with many agents
3) HF locked out the surviving agents only after most of the agents expired