Because staff is lazy as fuck, wasn't looking into it for a while and handled it extremely poorly.
They should've checked IP logs as soon as it happened.