Not surprisingly, speculation is running rampant concerning how this happened. Since this isn‘t just using some sort of zero day exploit, but rather „unauthorized code“ — it‘s pretty clear this isn‘t just some random security folks having fun.