The firm claimed to have digital evidence that Australian company ClickStudios suffered a breach, which resulted in the attacker dropping a corrupted update to its password manager Passwordstate.