Eamon Ryan (Dublin Bay South, Green Party) | Oireachtas source

We have to be careful not to speculate. We can only know the full details and full diagnosis of what happened after the extensive research the NCSC, the Department of Health and the international contractors do. It is likely the hackers were not just in the HSE on that particular day, but had spent a period of time in the system. These attacks are prepared in detail and at length in advance and often require a significant period where people gain access and then enhance their position within the network. The exact days or times are things we will discover as we do the full research.

See this speech in context