The incident is another reminder that third-party software and services are an easy way for attackers to steal sensitive data.
Source: Threadpost