For some context, here is the initial leak from 2013 that doesn’t name any vendors.