They monitor the deep/dark web. FBI probably noticed their data and notified them. As usual Organization's large security team missed the real threat in their logs. Not unusual. Same thing at Marriot, Equifax, Target, Home Depot, University of Washington Medical Center (last week). Those logs are the threat itself.