at "quite a high level", but declined to comment on how the files got on the machines and recovery media. It was demonstrated that an unattended installation of Windows Vista could accidentally copy material from a flash drive with a parameter in the "unattend.xml" file on the personal flash drive being used to script the installation. In February 2014, a security vulnerability in the AiCloud functions on a number of Asus routers was compromised to distribute a text file warning of a vulnerability, disclosed in June 2013, allowing the ability to "traverse to any external storage plugged in through the USB ports on the back of the router" via the open internet. Before making the vulnerability public, the researcher was told by Asus that the behavior was "not an issue", but the vulnerability was reportedly patched shortly prior to the breach. The IP addresses of 12,937 routers, and 3,131 AiCloud accounts were also leaked by the hackers. The U.S. Federal Trade Commission issued a complaint about the breach for the company's "failure to employ reasonable security practices has subjected consumers to substantial injury", alleging that Asus had also failed to perform basic penetration tests, allowed users to maintain a default admin password for the AiDisk feature and failed to notify users of security updates in a timely fashion. As a result, it was also deemed that Asus had misled consumers over the security and protection that its routers provided. In February 2016, Asus settled the complaint, agreeing to implement a "comprehensive security program", including independent audits every two years for the next 20 years. In March 2019, Kaspersky Lab researchers disclosed a supply chain attack that affected the Asus Live Update software bundled on its laptops, dubbed ShadowHammer. Kaspersky stated that between June and November 2018, Asus servers had been compromised to distribute a modified version of Live Update, signed with an Asus signature, that contained a backdoor. It deployed a further payload if the device's network adapter matched an entry on an internal target list of around 600 MAC addresses. In response to ShadowHammer, Asus released a patched version of Live Update with improved security measures. Kaspersky and Symantec estimated that between 500,000 and 1 million devices were infected with the backdoor, although Asus attempted to downplay the severity of the breach by noting the extremely targeted nature of the attack. The breach did not affect the similar, identically