I don&#x27;t know. If we&#x27;re going to speculate, I&#x27;ll say: the Facebook security team didn&#x27;t know this system existed (it&#x27;s a 3rd party admin console on a public IP address!), and their immediate reaction to it was &quot;nuke it from orbit, pay out the bounty for finding it, and forget about it&quot;.<p>My guess is that they discovered the AWS credential thing on December 1.