It starts with one purchased license.
Software piracy doesn’t require a hack. Someone buys a legitimate license, reverse-engineers the activation mechanism (or just shares the key), and uploads the cracked build to a nulled forum. Within 24 hours, automated scrapers repost it across half a dozen crack sites, APK mirrors, and torrent indexes. The pirate is a customer. DRM slows them down; it doesn’t stop them. The only defense that actually works long-term is finding the cracked copies after they surface and removing them faster than they spread.