Deloitte was breached last year, but investigators didn't find out until March
The breach was due to actors gaining access to a privileged account that was not guarded by two-factor authentication.