Surely if the SIAI is pursuing legal restitution, there are documents with more details which can be posted. For example a copy of a civil complaint. (Normally civil complaints are a matter of public record.)

Let's face reality: It's totally embarrassing that an organization dedicated to reducing existential risk for humanity was not able to protect itself from an extremely common and mundane risk faced by organizations day after day.

Of greater concern is that the SIAI may be falling into the common institutional trap of suppressing information simply because it is embarrassing.