So the latest rumour I've heard (I live in this city and know people that work there) is that one employee (a person I used to know from the IT sector incidentally) is of particular interest, taking an overseas holiday the day before the hack at no/little notice, and is now unreachable.

Again just a rumour, though does correlate well with the elementus article which suggests the whole db has been yoinked