"On June 8, 2026, the Company became aware of a cybersecurity incident involving a third‑party law firm (the “Firm”) that provides services to the Company. The incident involved a ransomware attack affecting certain of the Firm’s information systems."
Third-party breach, not their system.