Looking at the 4chan news, the only things I can say is keep your shit up to date and shut the fuck up if you are going to commit any kind of crime on the Internet.
It seems 4chan was using an outdated version of OpenBSD in which they haven't updated since 2016, a big cybersecurity fuck up on their part.
However, it seems the leaks show that they do have in contact with the glowies so if the Sharty is responsible for the hack (which is showing to be obvious) then it may not be the smartest move on their part because you don't fuck with feds and you don't fuck with the allies of the feds. Remember, 4chan is an American-based website protected by the Computer Fraud and Abuse Act of 1986 so I'm sure the 4chan admins and Hiro himself are collecting evidence to report their findings to CISA and the FBI as we speak. 4chan also does talk to the feds and reports any bad actors on their platform to the feds (and most likely they are talking to the feds about this breach).
It's also not a smart move by the Soyteens to post soyjack memes because if there is going to be a criminal investigation against the people that did this (and there most likely will be one) then it won't take much for the feds to subpoena the Sharty's hosting providers and servers to collect evidence. I know for a fact the Sharty prohibits Tor and VPN users from posting on the Sharty and you have to use a real home IP address to post there based on what people told me about the Sharty; so if the feds get a search warrant to search the Sharty's back end then anyone on the Sharty openly taking responsibility for this will be put on some government watchlist where the glowies will watch their every move and possibly arrest them (because the feds will have their IP doxes on file).
So what lessons can be learned from this?
If you are going to commit any kind of cybercrime, don't openly admit your affiliations (posting soyjak memes shows affiliation to a community and in this case it's the Sharty) and don't openly brag about your exploits (you will get caught because humans make mistakes and especially if you are public about it; bragging about your crimes online is horrible OPSEC, some of the Internet most notable cybercriminals end up getting busted because they talk too much).
Always update your shit for cybersecurity reasons and don't get lazy with your OPSEC. Updating your devices and software can be annoying and sometimes a pain in the ass but a few minutes to half an hour or a few days of your time to update your shit is worth it to prevent or mitigate a cyberattack like this.