everybody had the password.
it was solarwinds123.
On a more serious note, OK some malware got in,,,,but it wasn't detected at Department of Treasury, DOE, or any other department in government since what, March? It took an outside company to find it?
This is not good.