They say the spy program/backdoor was installed last year. But I only see evidence of Stamos finding it last year. What if it was really installed in 2014, and

They say the spy program/backdoor was installed last year. But I only see evidence of Stamos finding it last year. What if it was really installed in 2014, and it's what led to the record-breaking data breach?