The breach occurred through a vulnerability in third-party file transfer software, and it took weeks for the banks to ...