Wait, where can we read more about that? When you say "the keys to prod" do you mean the prod .ENV variables, or something else?
An employee (dev/sysadmin) had their home device compromised via a supply chain attack, which installed a keylogger and the attacker(s) were able to exfiltrate the credentials to lastpass cloud envs.