Hopefully we get details on _how_ the snowflake employee was hacked. It makes us wonder how things could be tightened up and what can be applied to our own org

Hopefully we get details on _how_ the snowflake employee was hacked. It makes us wonder how things could be tightened up and what can be applied to our own organisations. If the hackers got passwords then how come there wasn’t 2FA? Or did they get a Trojan onto an employee computer and surf onto it the corporate vpn? Or did they corrupt an employee? Or did the evil maid or something? And how long did they have access? Or another approach?