A breach was detected through a compromised software update, indicative of a supply chain attack. This aligns with Sandworm's known tactics of targeting critical infrastructures using destructive methods. The initial access was likely aimed at causing widespread disruption in Maersk's network.