I would be very interested in knowing how the key was obtained.

If it was obtained by Russia and passed to Kaseya that would mark a significant change in how cybercrime of this type is being handled by Russia. It might be the point where they said "this is causing us too much damage, stop". Their plausible deniability was long gone anyway.