"We recently became aware of unauthorized access to certain of our information technology systems hosted by a third party cloud provider."

Is this an attempt to shift blame? Using wording that implies it was someone else's fault is not confidence inspiring.