An attacker gained unauthorized access to the Keystone website by exploiting a vulnerability in an unnamed third-party data monitoring tool