If this hacker group got in, then it’s extremely likely that other state sponsored hacker groups got in too (and they’re not making it public). If you work with highly sensitive information, then you should be responsible and make sure no one is getting in. I’m sorry, but it is how it is. Be glad these people got in now and are bringing it into the public eye. We should be much more responsible with these things and the public should expect AND demand responsibility from every single state institution working with highly sensitive data. I worked in cybersec.