And, they were directly installing compromised hardware in datacenters [1]

[1] https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...