Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers

by Andy Greenberg

But it showed that someone had secret access to the same network that had served as the epicenter of a global calamity for at least twenty months.

20 months is not uncommon, I’d say.