The incident quickly escalated into a full-blown crisis. John's colleagues were forced to change all their passwords, and the company's security team had to conduct a thorough investigation to determine the extent of the damage.