if you're not following:
- Rabbit got hacked, claimed it did not get hacked, then admitted it got hacked
- did an investigation and found an employee leaked source code that contained API keys, which were exploited
- argued that this did not constitute a security breach
- blamed "hacktivists" and journalists for reporting on this
- said that they were in the process of fixing the issue anyway
- commissioned a pentest to show that everything is fine, actually