Brian Krebs is reporting[1] this as a "supply chain attack". Will be interesting if any further details come out. Depending on where the exploit came from, this could potentially be a much bigger story.
Thankfully the EHR company has been working on a Sisense replacement for some time now and we're in the beta group, but...