I would be highly surprised if this wasn't a case of "they either did it or they just haven't been found out yet" for most regular institutions.