Just got off work so not sure if this is known but SolarWinds breach initially happened in April and malware was injected through the (mandatory) updates. Info was relayed in a/an (unclassified) meeting today.