Exclusive: The attack first affected an upstream provider of bespoke software