ShinyHunters, the attacker group behind the breach, gained access by impersonating an IT help desk to a Google employee.