Post-mortem: Financial firm breached via unpatched SQL Server