It’s too early to say exactly what happened, but there’s several MSPs in common involved, and it seems likely there’s some kind of supply chain element — perhaps with a common DevOps library.