One of my youtube sources: https://www.youtube.com/watch?v=aKhfL9IP6DI
Indications it happened in March 2020. Hacker worked very hard to avoid detection