You should look at the original post from the security researcher. He used an employees login to access internal MCD software, defaced stuff for a short time, etc.

Of course MCD didn’t take that well.