The breach, which occurred in early December 2024, exploited a vulnerability in BeyondTrust's remote support product.