Data from the bank was compromised through the vendor of a vendor, a hallmark of difficult-to-prevent — and increasingly popular — supply chain security incidents.
Original source: https://www.bankingdive.com/news/morgan-stanley-accellion-data-breach/603117/