What the claim says

The assertion under examination is that attackers exploited a security weakness before the vulnerability was made public — a scenario commonly referred to as a zero-day attack. Under such circumstances, victims have no patch available at the time of compromise, since the flaw is unknown to the software vendor and the wider security community.

What is and is not established

The available evidence supports the core sequence of events: hacking took place ahead of the vulnerability's public disclosure. However, key details surrounding the incident remain unresolved, including the full scope of the exploitation and the precise timeline between the initial intrusion and the eventual disclosure. The assessment stops short of endorsing the claim in full, leaving open questions about circumstances that primary sources did not settle.

The distinction matters for how the incident is understood. An attack before disclosure typically points to attackers discovering the flaw independently, whereas a compromise after disclosure suggests attackers exploited a known, unpatched weakness. The evidence reviewed points to the former, though the incomplete record leaves room for alternative readings of parts of the timeline.

The claim that the hacking occurred before the vulnerability was disclosed is, on balance, Partly True.

Verdict: Partly True