The breach was identified by security researchers on October 17, as they tracked the misuse of credentials across numerous organizations. The incident highlights a systemic supply-chain risk where a single compromised account at a service provider can expose hundreds of downstream clients who rely on that provider's backup and management tools.
