Single post in Account Breach incident

is it possible for the PF1 transfers to also be stolen? I suddenly thought that it might be a possibility since they managed to breach a bunch of normal accounts so it wouldn't be too farfetched for them to breach the pf1 accounts and transfer them using the PF1 transfer site. Still not totally sure but just throwing this out there!