The loss resulted from an exploit that took place two days prior, compromising the database of a third-party cloud service provider.