Sort:  

The attacker could have reported themselves (v4v.app) if they had access to the Hive account, but I believe that was never the case.

Ah, okay. A command is required then. That part went over my head 😅