The New York Times this afternoon revealed what may have happened two days ago – when roughly 130 accounts were compromised using internal company tools. The official investigators are starting to piece together the behind-the-scenes events almost as fast as the investigators themselves themselves.

Reporters Nathaniel Popper and Kate Conger tell the stories of four individuals involved in the hack. The hack resulted in the takeovers of some of the platforms most high-profile and sensitive accounts.

The Times report says the attack can be traced to a group of hackers who congregate online at ogusers.com. Two prominent users came into contact with someone they’d never heard of before, who only identified themselves as’Kirk’.

It’s unclear how Kirk allegedly got access to Twitter’s Slack. Previous reports said hackers may have gained access to the internal tool by bribing an existing employee.

After Kirk’s takeover of short account names like @ Y and @ 6, he became the most devastating hack Twitter has ever seen in its history.