What I don't see anyone actually asking is who was behind the breach given the sophistication of the attack and the measures they went to to avoid detection. This wasn't the case of a database just sitting in the open that they could access.

The actual report makes for better reading than Tech Crunch.

https://www.warren.senate.gov/imo/media/doc/2018.09.06%20GAO...