"In this instance the attack was identified, the system was isolated, and there is no indication whatsoever that any exfiltration of data took place, " the official said.
Imagine if the problem had been first identified in November via a process to audit related systems based on the one reported intrusion into the internal chat application, or if an intrusion detection system had started firing red based on the exfiltration of their entire MySQL database.