After the breach, the incident report identified self-XSS as the method used to compromise multiple admin accounts, since users had been tricked into pasting malicious scripts into their browser consoles.