Wasn't the hack done by the company that released a compromised update? So, someone working in the company? The USA is insane having so many foreigners work in US tech like it was a positive thing. It's not just Indians either, there are a ton of Han Chinese from China too, or there were.