Good to hear, that the access was limited, allthough the limit “0” would have been better. Things could happen, and you could learn and do it better in the future.
For me, some important information in this “learning process” is missing:
HOW could they access to your system? Was it a gap in any outdated software? Or in the IT infrastrucutre used? Did someone of the team did a mistake while programming something? Click a link he should’nt do?
And what actions have you concreately taken to prevent it in the future? “to improve security” is quite a wide range (or at least what people want to hear in such cases)
To see some more detail of your assessment would be helpfull for me as a user of iNat, to think about my confidence in iNat for future usage.
Thanks in advance.