The investigation into a stolen Mimecast-issued digital certificate is now complete, and vendor said the initial intrusion was Sunburst malware in the SolarWinds Orion platform.

SolarWinds hackers stole Mimecast source code (techtarget.com)