Well done. You identified the breach correctly.

All systems are now restored.

A report has been sent to the Incident Response team.