The breach occurred through a compromised third-party marketing platform, allowing attackers to impersonate the trusted ...