Yeah, I’ve been looking into it. The breach seems to be a well‑coordinated phishing push that got through a zero‑day in the legacy authentication layer. We’ve traced the IPs to a known threat actor group that’s been targeting data centers with similar old firmware. The attack surface was still wide open because the patches for that specific flaw never got deployed. I’m compiling a detailed report, but in short, the culprit is almost certainly that group. Stay alert and make sure your own systems are up to date.