As far as I understood it, their entire repo got pwnd in February, and this now is the third successful attack by the same actor.