Unless the employee helped in a way that they didn't realize could be used for such a hack.

And/or they just thought it couldn't be traced back to them.