Probably a hack, or at least some spearphishing. You can buy a lot of 0days when your budget is billions.