 I discussed a third-party firm that provides various billing and other crucial services for healthcare facilities that was apparently similarly attacked. Now, the logic behind these kinds of attacks is pretty obvious. Rather than a single conventional firm at a time, by going after these third-party IT service firms, they could have vastly broader impact more efficiently. I haven't seen any discussion of how the CDK systems are compromised.