Im assuming these softwares are customised for every customer. So the attacker was able to get elevated privileges at the software level that made them run rand

Im assuming these softwares are customised for every customer. So the attacker was able to get elevated privileges at the software level that made them run randsomware across multiple customers.