A backdoored installer was put onto the company’s official servers, and millions of people likely downloaded it.

https://motherboard.vice.com/en_us/article/a3kgpa/ccleaner-backdoor-malware-hack