In other words, the threat actors had access to the breached network during the 22-ish months before they were discovered.