What strikes me:
- amount of data, 10PiB, is bonkers;
- apparently this was happening over half a year;
- apparently the dataset includes military secrets.
CNN annoyingly keeps switching between "a hacker" and "the group". This is a great example where "hacker" should not be used at all – ignoring the obvious mis-use of the term (hacker is not the same as cybercriminal), "hacker" makes it seem as if it's some lone activist somewhere.
It's not. Not with 10PiB of data exfiltrated over 6mo.