It is a big possibility that the hacking was done by an insider, it can never be done by someone that doesn’t have an insight of the company. And it can also be done by someone that have worked in the company before. Everyone  should stay safe.