Two important take-aways from that:
1) The attackers just pulled the old "Hey, I'm from IT service desk and need your password."
2) Apparently every engineer had god mode in production
I can't imagine what scary monsters are in that codebase.