Comment by shawabawa3

4 months ago

Possibly yes

Or some part of their system failed and the key was compromised without them realising it (like the Debian insecure keys debacle or whatever)