Brian Stanley (Laois-Offaly, Sinn Fein) | Oireachtas source

Yes. It came from the supplier's email address but it refers to that address being hacked. I presume this means that someone go into the supplier's IT system and emails and sent it from that and gave instruction to misdirect it.