Attackers could even have used one vulnerable Lookout user to gain access to other GCP tenants' environments.