Kaseya’s backend infrastructure was attacked by a ransomware gang, and abused by them to deploy a malicious update to VSA servers that were running on the client premises. This update installed the REvil ransomware from the VSA server to all the workstations that were connected to it. This way, all the other third-party networks of the other companies were impacted.