we should be careful making the assumption that this is all the data they exfiltrated. this could easily just be the first tranche to prove that they’re serious