Yip. Even when we contacted SITA for the article, they denied;
They immediately shift blame to “many departments”, when even SITA themselves are vulnerable.
They’re running Drupal 7, and many of their servers have vulnerabilities - the same servers that host SITA content.