Supermicro hack: “traced the malicious chips to four subcontracting factories that had been building Supermicro motherboards for at least two years.”

Link. Not clear FBI wanted this known. So far Supermicro presented as victim. Would be surprising if they were not penetrated though.