I can neither confirm nor deny details of such incidents but I will share this meme for lulz
Weird… Who allows a direct push to the branch production gets deployed from? Seems like you'd have that branch protected by a PR process that includes both CI-testing and a manual code-review?