The intrusion commenced in late November 2022, with Microsoft detecting it on January 12. The same highly skilled Russian hacking team responsible for the SolarWinds breach was identified as the threat actor.