Andover has confirmed that an attacker gained unauthorized access to some systems during the August cyberattack, but investigators have not determined whether any data was acquired.