There is this audit and recount process. It is difficult to put a timeline to both of these activities at this point."
VOA: standard.2009.09.15
The info requested was strictly business stuff and it was not particularly pleasant, but it was no worse than going through a processaudit or any of a million other consulting trials.
Imagine if the problem had been first identified in November via a process to audit related systems based on the one reported intrusion into the internal chat application, or if an intrusion detection system had started firing red based on the exfiltration of their entire MySQL database.