It's a third party companies and many alphabet agencies use for remote verification. They were compromised allowing nafarious actors to gain access to protected systems.