So the State Department was the first to alert on the Microsoft key compromise thanks to canaries they instituted in their email system.

This is, frankly, a huge win for State - for a good few years around DC, State's email was considered constantly compromised. 

Really nice to see that they upped their game and it paid off.

https://www.politico.com/news/2023/09/15/digital-tripwire-helped-state-uncover-chinese-hack-00115973