Apache has published a concise incident report following it being compromised by an SSH key last week.