The previous Krebs article [1] on this walks through the opsec mistake(s) but it always comes down to email address re-use and nickname/ handle re-usage. As more data breaches happen the likelihood of an opsec mistake increases. Once a handle is burned it’s best to never re-use it again… ever. Even if it’s been a decade.

Also, the reuse of email or any form of contact information on a service/ web hosting or DNS registration is another common opsec oopsie

[1] https://krebsonsecurity.com/2024/11/hacker-in-snowflake-exto...