It’s a supply chain attack, maybe a distributor was compromised or even a member of the group could betray them