The satellite was in orbit. This is an interview from the Thales CyberSecurity Manager about it. Interview is in French, but its a beautiful language to brush up on anyway, and if you can't, YouTube Autotranslate is also not bad nowadays.
I was expecting a technical manager but instead it's just some ex-Mckinsey manager. I wouldn't be suprised if they gained access via some open port or a default password or whatever the equivalent is for satellites.