reportedly he had access to the site backend for a year+, seems like there was more to the attack then just the pdf vulnerability