Vendor-sec host compromised, shut down

For a mailing list that is about security, I'm surprised with the lack of backups, forensics and security procedures ("when you detect a breakin, get the machine offline first!"). A shame.