We identified and verified the attack vector and have no indication there is other compromise.

In addition to our in-house security team, we also have hired a 3rd-party firm to do their own investigation and validate our analysis.

We hope to share more about our findings once the investigation concludes.