[93po]

> Cyberattacked by whom?

Whoever is politically convenient

> How?

Probably social engineering but possibly poor security practices

> What vulnerabilities allowed the intrusion

Probably poor security training on employees and poor safeguards, but possibly also poor security practices in software engineering

> what organizational processes created those vulnerabilities?

Leadership with poor priorities and shortsightedness for the sake of short-term profit