This is legitimately some of the worse opsec I've ever seen. I'd held off on commenting on the story yesterday since it sounded like (from the official responses, which are now clearly, to use a technical term, utter bullshit) it might just be majorly embarassing without being a huge opsec fuck up. But no, it's a failure on a high level, the sort where at least half the people involved have demonstrated they need out of their jobs today.