The attack vector was not the Orion platform but rather an email-protection application for Microsoft 365.
Source: Threadpost